Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-101105: Matrimonial System profile creation can be exploited remotely

CVE-2026-101105 · published 21 days ago

Summary

The Matrimonial System version 1.0 lets attackers send specially crafted data to the profile creation page and run their own database commands. This could let them view, change, or delete personal information stored in the system. Apply the vendor's security update or add proper input validation to the profile creation function as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
code-projects	matrimonial system	1.0

Original advisory text

code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

References

https://vuldb.com/vuln/410978 vdb-entry technical-description
https://vuldb.com/vuln/410978/cti signature permissions-required
https://vuldb.com/cve/CVE-2026-101105 third-party-advisory
https://vuldb.com/submit/938251 third-party-advisory
https://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/sqli_createpr... exploit
https://code-projects.org/ product

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

2.1 Low

Exploitation

<1% chance of attack within 30 days

Type

CWE-89SQL Injection

CWE-74Injection

Timeline

Published28 Sep 2026

Updated19 Oct 2026

First seen28 Sep 2026

Sources

CVE-2026-101105 · NVD

CVE-2026-101105 · MITRE

Track software like this

Free during beta