CVE-2017-20067

CVE-2017-20067 is a critical SQL injection vulnerability affecting the Hindu Matrimonial Script, specifically within an unknown administrative function. This flaw allows remote attackers to bypass authentication by manipulating the username/password arguments with a crafted 'or''=' input. With a CVSS score of 9.8, the vulnerability poses a high risk to confidentiality, integrity, and availability due to its network-based attack vector and low attack complexity. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei, and community discussion remains minimal.