CVE-2026-101105
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Risk Assessment
SQL injection could allow an attacker to gain unauthorized access to the database, steal data, modify or delete data, or even take control of the system.
Recommendation
It is recommended to immediately update the Matrimonial System to a patched version and implement input validation and parameterized queries.
Other vulnerabilities in code-projects Matrimonial System
Original NVD description (English source)
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS