CVE-2023-46789 — Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46789

Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi) PUBLISHED

Description (CNA)

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected (CNA)

Vendor / product	Versions
Projectworlds Pvt. Limited / Online Matrimonial Project	affected 1.0

CWE

CWE-89

References

https://fluidattacks.com/advisories/ros
https://projectworlds.in

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/ros
https://projectworlds.in

CISA-ADP

No English description supplied.

No references supplied.