CVE-2023-46794: Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 7, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Matrimonial Project=1.0
Event History
Nov 7, 2023
CVE Published
09:13 PM
Rejected
09:13 PM
Data Sourced
via NVD·10:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-46794?
The severity of CVE-2023-46794 is critical with a CVSS score of 9.8.
2
How does CVE-2023-46794 affect Online Matrimonial Project v1.0?
CVE-2023-46794 affects Online Matrimonial Project v1.0 by allowing multiple unauthenticated SQL Injection vulnerabilities.
3
Which function in functions.php is vulnerable to unauthenticated SQL injections?
The 'register()' function in functions.php of Online Matrimonial Project v1.0 is vulnerable to unauthenticated SQL injections.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-46794?
The Common Weakness Enumeration (CWE) ID for CVE-2023-46794 is CWE-89.
5
How can I fix the multiple unauthenticated SQL Injection vulnerabilities in Online Matrimonial Project v1.0?
To fix the multiple unauthenticated SQL Injection vulnerabilities in Online Matrimonial Project v1.0, you should validate and filter the 'email' parameter in the 'register()' function of the functions.php resource before sending them to the database.