vsociety

CVEs

CVE-2023-46798

9.8 Critical Severity

Apps

xtranslation

CVE (Common Vulnerabilities and Exposures) description for Online Matrimonial Project v1.0: A critical vulnerability has been identified in the software, where multiple points are susceptible to SQL injections without prior authentication. In simpler terms, the issue lies in how the system processes certain user inputs. Specifically, the 'pass' parameter within the 'register()' function in the functions.php file does not properly validate the input characters. This allows unfiltered characters to be sent directly to the database, representing a significant risk. In practical terms, an attacker could exploit this flaw to manipulate the system, potentially accessing or modifying data inappropriately.

@SolibreCR

1 post

Total vcoins

350

Comments (0)