CVE-2023-46677

Summary

CVE-2023-46677 affects the Online Job Portal v1.0, where the 'sign-up.php' resource contains unvalidated SQL input in the 'txt_uname' parameter. This vulnerability allows an attacker to inject malicious SQL queries, which can result in unauthorized access, data theft, or server compromise. No validation checks are implemented on user input, making it easy for attackers to exploit this unauthenticated SQL injection flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.