CVE-2023-46676: Online Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 7, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Job Portal=1.0
Event History
Nov 7, 2023
CVE Published
08:34 PM
Rejected
08:34 PM
Data Sourced
via NVD·09:15 PM
Description
Frequently Asked Questions
1
What is CVE-2023-46676?
CVE-2023-46676 is a vulnerability in Online Job Portal v1.0 that allows for multiple unauthenticated SQL injections.
2
What is the severity of CVE-2023-46676?
CVE-2023-46676 has a severity rating of 9.8, which is considered critical.
3
How does CVE-2023-46676 affect Online Job Portal v1.0?
CVE-2023-46676 affects Online Job Portal v1.0 by allowing attackers to perform unauthenticated SQL injections through the 'filename' parameter of the sign-up.php resource.
4
What is the CWE ID of CVE-2023-46676?
CVE-2023-46676 has a CWE ID of 89, which refers to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection').
5
How can I fix CVE-2023-46676 in Online Job Portal v1.0?
To fix CVE-2023-46676, it is recommended to properly validate and filter the 'filename' parameter of the sign-up.php resource to prevent SQL injections.