CVE-2023-46795: Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 7, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Matrimonial Project=1.0
Event History
Nov 7, 2023
CVE Published
09:14 PM
Rejected
09:14 PM
Data Sourced
via NVD·10:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-46795.
2
What is the severity of CVE-2023-46795?
The severity of CVE-2023-46795 is critical with a CVSS score of 9.8.
3
What is affected by CVE-2023-46795?
The Online Matrimonial Project v1.0 is affected by CVE-2023-46795.
4
How does CVE-2023-46795 work?
CVE-2023-46795 allows attackers to perform multiple unauthenticated SQL injections by manipulating the 'gender' parameter in the 'register()' function of the functions.php resource.
5
Is there a fix for CVE-2023-46795?
Yes, to fix CVE-2023-46795, the 'gender' parameter in the 'register()' function of the functions.php resource should be properly validated and filtered before being sent to the database.