HIGH

CVE-2026-92926

2026-09-17 CVSS v3.1

CVSS

7.3

Description

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Weakness (CWE)

CWE-74 Injection

CWE-89 SQL Injection

EPSS Score

0.27%

Probability of exploitation in next 30 days

19.3th percentile

References

https://code-projects.org/ https://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/partner_preference/sqli_education/Readme.md https://vuldb.com/cve/CVE-2026-92926 https://vuldb.com/submit/942287 https://vuldb.com/vuln/406377 https://vuldb.com/vuln/406377/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE