Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Multireligion Responsive Matrimonial lets attackers insert malicious database queries

CVE-2017-17631 · published 8 years ago
Summary

Version 4.7.2 of Multireligion Responsive Matrimonial accepts a value called succid in the success-story page without checking it. An attacker could supply specially crafted data to run their own commands on the website's database, potentially viewing or changing information. Apply any available update from the vendor and make sure the site validates all inputs before they reach the database.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
multireligion_responsive_matrimonial_project multireligion_responsive_matrimonial 4.7.2
cpe:2.3:a:multireligion_responsive_matrimonial_project:multireligion_responsive_matrimonial:4.7.2:*:*:*:*:*:*:*
Original advisory text
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published13 Dec 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-17631 · NVD
Track software like this
Free during beta