CVE-2023-46789

Summary

CVE-2023-46789 is a vulnerability affecting the Online Matrimonial Project v1.0 software. This issue allows unauthenticated attackers to inject SQL commands into the application through the 'filename' attribute of the 'pic1' multipart parameter in the functions.php file. The vulnerability occurs due to insufficient input validation, resulting in unfiltered data being sent to the database, potentially leading to unauthorized access, data theft, or system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.