Projectworlds Online Matrimonial Project vulnerabilities

7 CVEs affecting Projectworlds Online Matrimonial Project, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46800, published 2023-11-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27397, published 2020-12-23. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) on the Hosting web server…
CVE-2023-46800, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the view_profile.php resource does not validate the characters received…
CVE-2023-46793, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register()' function of the functions.php resource does not…
CVE-2023-46789, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does…
CVE-2023-46788, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter in the 'uploadphoto()' function of the functions.php resource does not…
CVE-2023-46787, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters…
CVE-2023-46785, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partner_preference.php resource does not validate the characters…