CVE-2023-46680: Online Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Nov 7, 2023

Updated

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Affected Software

1 affected component

Projectworlds Online Job Portal=1.0

Event History

Nov 7, 2023

CVE Published

08:38 PM

Rejected

08:38 PM

Data Sourced

via NVD·09:15 PM

Description

Frequently Asked Questions

What is CVE-2023-46680?

CVE-2023-46680 is a vulnerability in Online Job Portal v1.0 that allows multiple unauthenticated SQL injections.

What is the severity of CVE-2023-46680?

CVE-2023-46680 has a severity rating of 9.8, which is considered critical.

How does CVE-2023-46680 affect Online Job Portal v1.0?

CVE-2023-46680 affects Online Job Portal v1.0 by allowing unauthenticated SQL injections through the 'txt_password' parameter of the index.php resource.

How can I fix CVE-2023-46680?

To fix CVE-2023-46680, you should validate the characters received in the 'txt_password' parameter and ensure they are properly filtered before being sent to the database.

Where can I find more information about CVE-2023-46680?

You can find more information about CVE-2023-46680 in the following references: [Fluid Attacks Advisory](https://fluidattacks.com/advisories/netrebko) and [Projectworlds](https://projectworlds.in).