CVE-2026-101105

MEDIUM 6.3

code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection

CVSS Score

6.3

EPSS Score

0.2%

EPSS Percentile

9th

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

CWE	CWE-89 CWE-74
Vendor	code-projects
Product	matrimonial system
Published	Sep 28, 2026
Last Updated	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for code-projects matrimonial system

Be the first to know when new medium vulnerabilities affecting code-projects matrimonial system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

code-projects / Matrimonial System

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/410978 vuldb.com: https://vuldb.com/vuln/410978/cti vuldb.com: https://vuldb.com/cve/CVE-2026-101105 vuldb.com: https://vuldb.com/submit/938251 github.com: https://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/sqli_createprofile/fname_parameter/Readme.md code-projects.org: https://code-projects.org/

Credits

shlok_03 🔍 KaranParelkar (VulDB User) KaranParelkar (VulDB User)