CVE-2023-46792: Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 7, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Matrimonial Project=1.0
Event History
Nov 7, 2023
CVE Published
09:09 PM
Rejected
09:09 PM
Data Sourced
via NVD·10:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID is CVE-2023-46792.
2
What is the severity of CVE-2023-46792?
The severity of CVE-2023-46792 is critical (9.8).
3
What is the affected software for CVE-2023-46792?
The affected software for CVE-2023-46792 is Online Matrimonial Project v1.0.
4
What is the CWE ID for this vulnerability?
The CWE ID for CVE-2023-46792 is CWE-89.
5
How can I fix the multiple unauthenticated SQL injections in Online Matrimonial Project v1.0?
To fix the multiple unauthenticated SQL injections, you should validate and sanitize the 'filename' attribute of the 'pic4' multipart parameter in the functions.php resource.