CVE-2026-108938
code-projects Matrimonial System matrimony.sql file access
code-projects Matrimonial System
CVSS
6.9MediumExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 13 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.31%Chance of exploitation activity in the next 30 days, higher than 22% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.
Text from CVE List
Affected versions 1
- Matrimonial Systemaffected: 1.0CVE List
References 6
- vuldb.com/cve/CVE-2026-108938Advisoryvia CVE List
- vuldb.com/submit/997582Advisoryvia CVE List
- github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/Information%20Disclosure/Readme.mdExploitvia CVE List
- vuldb.com/vuln/416762Referencevia CVE List
- vuldb.com/vuln/416762/ctiReferencevia CVE List
- code-projects.org/Referencevia CVE List