81 matches found
EUVD-2023-50952
Malicious code in bioql PyPI...
EUVD-2023-50956
Malicious code in bioql PyPI...
EUVD-2023-50967
Malicious code in bioql PyPI...
EUVD-2023-50960
Malicious code in bioql PyPI...
CVE-2023-46785
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partnerpreference.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46800
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the viewprofile.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46789
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46793
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46791
The CVE entry CVE-2023-46791 is marked as withdrawn/rejected. Connected document PT-2023-30218 describes an unauthenticated SQL Injection in Online Matrimonial Project v1.0, where the filename parameter of pic3 in functions.php does not validate input, sending unfiltered data to the database. No ...
PT-2023-30218 · Unknown · Online Matrimonial Project
Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns unauthenticated SQL Injection vulnerabilities. Specifically, the filename attribute of the pic3 multipart parameter in the functions.php resource does not validate the...
Number withdrawn
Online Matrimonial Project is an online marriage recruitment program. This CVE number has been withdrawn...
CVE-2023-46800
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the viewprofile.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46800
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the viewprofile.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46793
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database...
Sql injection
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database...
Sql injection
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the viewprofile.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46800
CVE-2023-46800 affects Online Matrimonial Project v1.0. The vulnerable component is the view_profile.php endpoint, where the unvalidated characters in the id parameter are sent to the database unfiltered, enabling unauthenticated SQL injection. The CVSS v3.1 base metrics indicate NETWORK attack v...
CVE-2023-46800 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the viewprofile.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46800 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the viewprofile.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46798
Open Redirect CVE-2023-46798 is not applicable here; instead, connected material identifies a concrete issue: Online Matrimonial Project v1.0 contains an unauthenticated SQL Injection vulnerability in the register() function (functions.php) via an insecure pass parameter. Root cause: use of an un...