projectworlds Online Matrimonial Project 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:projectworlds:online_matrimonial_project:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Projectworlds (1c49ba31-3767-5ff6-9610-c6dcb2aee835) |
|---|---|
| Product | Online Matrimonial Project (6b7634a9-746b-5dcd-8521-48afe1c9011d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/projectworldsofficial/online-matrimonial-project-in-php |
purl2cpe | 2026-06-01 10:16:18.468304 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46800 |
vulnerable | 2026-06-08 06:14:23.317001 |
Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CRITICAL (9.8)
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the view_profile.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-11-07T21:19:21.672Z
Updated: 2024-09-04T15:37:42.963Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46793 |
vulnerable | 2026-06-08 06:14:23.316115 |
Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CRITICAL (9.8)
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-11-07T21:10:20.104Z
Updated: 2024-09-17T13:04:39.293Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46789 |
vulnerable | 2026-06-08 06:14:23.315200 |
Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CRITICAL (9.8)
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-11-07T21:02:14.461Z
Updated: 2024-09-17T13:05:41.498Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46788 |
vulnerable | 2026-06-08 06:14:23.304522 |
Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CRITICAL (9.8)
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter in the 'uploadphoto()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-11-07T21:01:11.340Z
Updated: 2024-09-17T13:06:16.599Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46787 |
vulnerable | 2026-06-08 06:14:23.303987 |
Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CRITICAL (9.8)
Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-11-07T20:59:34.528Z
Updated: 2024-09-17T13:30:48.913Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46785 |
vulnerable | 2026-06-08 06:14:23.303294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27397 |
vulnerable | 2026-06-08 05:23:52.675880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.