CVE-2026-92366 code-projects Matrimonial System - SQL Injection

code-projects Matrimonial System 1.0 contains a sql injection caused by manipulation of arguments sex, mothertongue, maritialstatus, country, state, religion, agemin, agemax in /search.php Regular Search component, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

CVSS base score 7.3 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Not required
EPSS
0.56% chance of exploitation in 30 days
View the NVD record ↗