CVE-2026-92366: code-projects Matrimonial System Regular Search search.php sql injection
A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be initiated remotely and requires no privileges or user interaction according to the supplied severity vector. Systems exposing the Regular Search functionality are the relevant attack surface.
Which inputs should be investigated for malicious requests?
Inspect requests to /search.php for the Regular Search arguments sex, mothertongue, maritialstatus, country, state, religion, agemin, and agemax. The vulnerability is triggered through manipulation of these parameters.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used by attackers.