CVE-2023-46797: Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-46797?
CVE-2023-46797 is a vulnerability in the Online Matrimonial Project v1.0 that allows for multiple unauthenticated SQL injections.
How does CVE-2023-46797 affect the Online Matrimonial Project v1.0?
CVE-2023-46797 affects the Online Matrimonial Project v1.0 by allowing unauthenticated SQL injections through the 'name' parameter in the 'register()' function of the functions.php resource.
What is the severity of CVE-2023-46797?
CVE-2023-46797 has a severity rating of 9.8, which is classified as critical.
How can I fix CVE-2023-46797 in the Online Matrimonial Project v1.0?
To fix CVE-2023-46797, you should validate the characters received in the 'name' parameter of the 'register()' function, filtering any potentially malicious SQL statements.
Where can I find more information about CVE-2023-46797?
You can find more information about CVE-2023-46797 at the following references: [Fluid Attacks Advisory](https://fluidattacks.com/advisories/ros) and [Projectworlds](https://projectworlds.in).