CVE-2023-46787

Publication date

2023-11-07 20:59:34

Family

Fluid Attacks

State

PUBLISHED

Description

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The username parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database.