CVE-2023-46680

02 Jan 2024, 19:15

Type	Values Removed	Values Added
CPE	cpe:2.3:a:projectworlds:online_job_portal:1.0:*:*:*:*:*:*:*
References	{'url': 'https://fluidattacks.com/advisories/netrebko', 'name': 'https://fluidattacks.com/advisories/netrebko', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': ''} {'url': 'https://projectworlds.in', 'name': 'https://projectworlds.in', 'tags': ['Product'], 'refsource': ''}
CVSS	v2 : unknown v3 : 9.8	v2 : unknown v3 : unknown
Summary	Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_password' parameter of the index.php resource does not validate the characters received and they are sent unfiltered to the database.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

---

13 Nov 2023, 17:54

Type	Values Removed	Values Added
CVSS	v2 : unknown v3 : unknown	v2 : unknown v3 : 9.8
CPE		cpe:2.3:a:projectworlds:online_job_portal:1.0:*:*:*:*:*:*:*
First Time		Projectworlds Projectworlds online Job Portal
References	() https://projectworlds.in -	() https://projectworlds.in - Product
References	() https://fluidattacks.com/advisories/netrebko -	() https://fluidattacks.com/advisories/netrebko - Exploit, Third Party Advisory

---

07 Nov 2023, 21:36

Type	Values Removed	Values Added
New CVE

---