First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2017-17984

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.mdExploit, Issue Tracking, Third Party Advisory
https://github.com/d4wner/Vulnerabilities-Report/blob/master/Muslim%20Matrimonial%20Script.mdExploit, Issue Tracking, Third Party Advisory

Timeline

Published: Dec 30, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-179854.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.CVE-2017-179864.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.CVE-2017-179877.2PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.CVE-2017-179884.8PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.CVE-2017-179895.4Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.CVE-2017-179908.8Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.CVE-2017-179915.4Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.CVE-2017-179929.8Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name CVE-2017-179935.4Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.CVE-2017-179945.4Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.CVE-2017-179955.4Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.CVE-2017-179968.8A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be