CVE-2017-20074: hindu_matrimonial_script_project hindu_matrimonial_script Improper Privilege Management

Vulnerability summary

CVE-2017-20074 is a high (CVSS 8.8) Improper Privilege Management vulnerability in hindu_matrimonial_script_project hindu_matrimonial_script. EPSS estimates a 0.84% chance of exploitation in the next 30 days, higher than 57% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 21-06-2022
   PublishedVulnerability first disclosed.
2. 15-04-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.