CVE-2023-46678: Online Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 7, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Job Portal=1.0
Event History
Nov 7, 2023
CVE Published
08:36 PM
Rejected
08:36 PM
Data Sourced
via NVD·09:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-46678.
2
What is the severity of CVE-2023-46678?
The severity of CVE-2023-46678 is critical with a CVSS score of 9.8.
3
What is the affected software?
The affected software is Projectworlds Online Job Portal version 1.0.
4
How does CVE-2023-46678 work?
CVE-2023-46678 allows an attacker to perform multiple unauthenticated SQL injections by exploiting the 'txt_upass' parameter of the sign-up.php resource.
5
Are there any references for CVE-2023-46678?
Yes, you can find more information about CVE-2023-46678 at the following references: - https://fluidattacks.com/advisories/netrebko - https://projectworlds.in