CVE-2026-108938

5.3 MEDIUMpublic exploit available

Published 2026-10-12 · Updated 2026-10-13

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-425, CWE-552

Public exploit & PoC references

https://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/Information%20Disclosure/Readme.md

All references

https://code-projects.org/
https://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/Information%20Disclosure/Readme.md
https://vuldb.com/cve/CVE-2026-108938
https://vuldb.com/submit/997582
https://vuldb.com/vuln/416762
https://vuldb.com/vuln/416762/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100727
LOWCVE-2026-102582
LOWCVE-2026-102583
MEDIUMCVE-2026-102584
HIGHCVE-2026-102695PoC
MEDIUMCVE-2026-105046
MEDIUMCVE-2026-105750PoC
UNSCOREDCVE-2026-108070

Related by shared AI tags and CWE weakness class. Browse the full archive.