Description
A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2026-10-12
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Assess Impact
AI Analysis

Impact

A flaw that affects Matrimonial System 1.0 allows an attacker to manipulate the file db/matrimony.sql and retrieve files or directories that should not be accessible. The vulnerability enables remote information disclosure through unauthorized file access.

Affected Systems

The vulnerable product is code-projects Matrimonial System 1.0.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog. Exploit code for this vulnerability has been published and the attack can be launched remotely, raising the likelihood of exploitation due to the absence of an official patch. The attack vector is inferred to be web based, given the remote nature of the attack and the involvement of an SQL file within a web application.

Generated by OpenCVE AI on October 13, 2026 at 00:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Restrict permissions on the db/matrimony.sql file and its containing directories so that only the web application can read them.
  • If a newer, patched version of Matrimonial System is released, upgrade immediately to eliminate the flaw.
  • Continuously monitor web server logs for unexpected attempts to access the database file and enforce logging and alerting to detect exploitation attempts.

Generated by OpenCVE AI on October 13, 2026 at 00:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 12 Oct 2026 23:15:00 +0000

Type Values Removed Values Added
Description A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.
Title code-projects Matrimonial System matrimony.sql file access
First Time appeared Code-projects
Code-projects matrimonial System
Weaknesses CWE-425
CWE-552
CPEs cpe:2.3:a:code-projects:matrimonial_system:*:*:*:*:*:*:*:*
Vendors & Products Code-projects
Code-projects matrimonial System
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Code-projects Matrimonial System
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-15T07:18:17.767Z

Reserved: 2026-10-11T18:27:13.439Z

Link: CVE-2026-108938

cve-icon Vulnrichment

Updated: 2026-10-13T13:20:56.494Z

cve-icon NVD

Status : Deferred

Published: 2026-10-12T23:17:22.220

Modified: 2026-10-13T14:17:23.820

Link: CVE-2026-108938

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T01:30:06Z

Weaknesses
  • CWE-425

    Direct Request ('Forced Browsing')

  • CWE-552

    Files or Directories Accessible to External Parties