Lucene search

K
ProjectworldsOnline Matrimonial Project

6 matches found

CVE
CVE
added 2023/11/07 10:15 p.m.44 views

CVE-2023-46800

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the view_profile.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8CVSS10AI score0.0015EPSS
CVE
CVE
added 2023/11/07 9:15 p.m.43 views

CVE-2023-46789

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8CVSS10AI score0.00145EPSS
CVE
CVE
added 2023/11/07 9:15 p.m.41 views

CVE-2023-46787

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8CVSS10AI score0.00145EPSS
CVE
CVE
added 2023/11/07 10:15 p.m.41 views

CVE-2023-46793

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8CVSS10AI score0.0015EPSS
CVE
CVE
added 2023/11/07 9:15 p.m.40 views

CVE-2023-46788

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter in the 'uploadphoto()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8CVSS10AI score0.0015EPSS
CVE
CVE
added 2023/11/07 9:15 p.m.31 views

CVE-2023-46785

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partner_preference.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8CVSS10AI score0.0015EPSS