CVE-2023-46788

Summary

CVE-2023-46788: Online Matrimonial Project v1.0 contains unauthenticated SQL injection vulnerabilities. The 'uploadphoto()' function in the 'functions.php' resource fails to validate user input on the 'id' parameter, allowing attackers to inject malicious SQL commands directly into the database. This can lead to unauthorized data access, modification, or disclosure. Attackers can exploit this vulnerability by sending specially crafted requests to manipulate or extract sensitive information from the database. Users of the affected software are advised to apply the necessary patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.