CVE-2026-92926
HighCVSS 7.3Summary
A vulnerability has been found in code-projects Matrimonial System 1.0. It affects the writepartnerprefs function in /partner_preference.php, where manipulation of the education argument leads to SQL injection. The attack can be executed remotely and the exploit has been publicly disclosed.
Risk Assessment
An attacker can remotely execute arbitrary SQL queries, potentially leading to data leakage, modification, or deletion. The public availability of the exploit increases the risk of rapid exploitation.
Recommendation
Patch the vulnerability as soon as possible by validating input and parameterizing SQL queries in /partner_preference.php. Consider deploying a WAF and restricting access to the application.
Other vulnerabilities in Matrimonial System
Original NVD description (English source)
A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS