CVE-2026-101105
code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 28, 2026
- Updated
- Oct 15, 2026
- Reserved
- Sep 28, 2026
Description
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Matrimonial Systemcode-projects |
|
References
- VDB-410978 | code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injectionvdb-entrytechnical-description
- VDB-410978 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-101105 | CVE Analysis and Reportthird-party-advisory
- Submit #938251 | code-projects Matrimonial System IN PHP 1.0 SQL Injectionthird-party-advisory
- https://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/sqli_createprofile/fname_parameter/Readme.mdexploit
- https://code-projects.org/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.