CVE-2023-46793

Summary

CVE-2023-46793: Online Matrimonial Project v1.0 contains multiple unauthenticated SQL injection vulnerabilities. The 'day' parameter in the 'register()' function of the functions.php file fails to validate user input, allowing attackers to inject malicious SQL queries and potentially gain unauthorized access to sensitive data. This vulnerability can lead to data theft or even system compromise. Users are strongly advised to update the affected software as soon as a patch is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.