CVE-2026-92366

HighCVSS 7.3

Published: 16/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Summary

code-projects Matrimonial System 1.0 has a SQL injection vulnerability in /search.php (Regular Search component). Parameters sex, mothertongue, maritialstatus, country, state, religion, agemin, agemax are susceptible to manipulation.

Risk Assessment

An attacker can execute arbitrary SQL queries, potentially leading to data leakage, modification, or corruption of the database.

Recommendation

Use prepared statements or input parameterization in /search.php and upgrade the system to a secure version.

Other vulnerabilities in code-projects Matrimonial System

CVE-2026-101105Medium
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Original NVD description (English source)

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS