PT-2026-27369 · Zeeways · Zeeways Matrimony Cms+1

Published 2026-03-24 · Updated 2026-03-24 · CVE-2019-25635

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zeeways Matrimony CMS (affected versions not specified)

Description Multiple SQL injection flaws allow unauthenticated attackers to manipulate database queries through the 'profile list' endpoint. By injecting SQL code via the up cast, s mother, and s religion parameters, attackers can extract sensitive information from the database using time-based or error-based techniques. SQL injection is a flaw where an attacker can interfere with the queries that an application makes to its database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25635

Affected Products

Zeeways Matrimony Cms

Matrimony Cms

References · 4

• 🔥 https://exploit-db.com/exploits/46603 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25635 · Security Note
• https://vulncheck.com/advisories/zeeways-matrimony-cms-lastest-sql-injection-via-profile-list · Note
• http://zeeways.com/matrimony-cms/4/productdetail · Note