PT-2023-30224 · Unknown · Online Matrimonial Project
CVE-2023-46797
·
Published
2023-11-07
·
Updated
2024-01-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Online Matrimonial Project version 1.0
Description
The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the
name parameter in the register() function of the functions.php file is vulnerable.Recommendations
For Online Matrimonial Project version 1.0, consider disabling the
register() function until a patch is available to prevent exploitation of the SQL Injection vulnerability. Restrict access to the vulnerable functions.php file to minimize the risk of exploitation. Avoid using the name parameter in the affected function until the issue is resolved.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Online Matrimonial Project