CVE-2026-92366

Name of the Vulnerable Software and Affected Versions code-projects Matrimonial System version 1.0

Description An SQL injection issue exists in the Regular Search component within the '/search.php' endpoint. A remote attacker can exploit this by manipulating the sex, mothertongue, maritialstatus, country, state, religion, agemin, and agemax arguments. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update code-projects Matrimonial System version 1.0 to a patched version. Disable the affected search functionality as a temporary mitigation measure.