CVE-2023-6651

CVE-2023-6651 is a critical SQL injection vulnerability affecting code-projects Matrimonial Site 1.0, specifically within the /auth/auth.php?user=1 file when manipulating the 'username' argument. This flaw allows for remote exploitation with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit frameworks like Metasploit, the exploit details have been publicly disclosed, and the vulnerability has garnered significant community discussion.