Code-Projects Matrimonial Site SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Code-Projects Matrimonial Site version 1.0. The issue resides in the 'view_profile.php' file, specifically within the 'id' parameter. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to access, modify, or delete database information. In this case, it could lead to unauthorized access to user information.

Reproduction

To reproduce this vulnerability, send a GET request to 'view_profile.php' with the 'id' parameter set to a value that can be exploited. The SQL injection can be verified by using a tool like sqlmap to enumerate databases, list tables, and dump data from the 'users' table.