PT-2023-30221 · Unknown · Online Matrimonial Project

CVE-2023-46794 · Publicado 2023-11-07 · Atualizado 2024-01-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Online Matrimonial Project version 1.0

Description The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the email parameter in the register() function of the functions.php file is vulnerable.

Recommendations For Online Matrimonial Project version 1.0, consider restricting access to the register() function until a patch is available. As a temporary workaround, avoid using the email parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2023-46794

Produtos afetados

Online Matrimonial Project

Referências · 3

• 🔥 https://fluidattacks.com/advisories/ros · Exploit
• https://twitter.com/VulmonFeeds/status/1722040337944768555 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-46794 · Nota de Segurança