CVE-2023-46677

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46677
Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname' parameter of the sign-up.php resource does not validate the characters received and they are sent unfiltered to the database.
CVSS

No CVSS.

References
Link Resource
https://fluidattacks.com/advisories/netrebko Exploit Third Party Advisory
https://projectworlds.in Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:projectworlds:online_job_portal:1.0:*:*:*:*:*:*:*
History

13 Nov 2023, 17:57

Type Values Removed Values Added
CPE cpe:2.3:a:projectworlds:online_job_portal:1.0:*:*:*:*:*:*:*
First Time Projectworlds
Projectworlds online Job Portal
References () https://fluidattacks.com/advisories/netrebko - () https://fluidattacks.com/advisories/netrebko - Exploit, Third Party Advisory
References () https://projectworlds.in - () https://projectworlds.in - Product

07 Nov 2023, 21:36

Type Values Removed Values Added
New CVE
Information

Published : 2023-11-07 21:15

Updated : 2023-11-13 17:57

NVD link : CVE-2023-46677

Mitre link : CVE-2023-46677

JSON object : View

Products Affected

projectworlds

  • online_job_portal
CWE

No CWE.