CVE-2023-46790: Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 7, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Matrimonial Project=1.0
Event History
Nov 7, 2023
CVE Published
09:07 PM
Rejected
09:07 PM
Data Sourced
via NVD·09:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-46790.
2
What is the severity of CVE-2023-46790?
The severity of CVE-2023-46790 is critical with a severity value of 9.8.
3
What is the affected software version of CVE-2023-46790?
The affected software version of CVE-2023-46790 is Online Matrimonial Project v1.0.
4
How does CVE-2023-46790 affect the 'pic2' multipart parameter of functions.php?
CVE-2023-46790 allows unauthenticated SQL injections in the 'filename' attribute of the 'pic2' multipart parameter of the functions.php resource.
5
How do I fix CVE-2023-46790?
To fix CVE-2023-46790, you should validate and filter the characters received in the 'filename' attribute of the 'pic2' multipart parameter of the functions.php resource.