CVE-2019-25639CWE-89

Matrimony Website Script M-Plus Multiple SQL Injection

High · published March 24, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, and cboCountry across simplesearch_results.php, advsearch_results.php, specialcase_results.php, locational_results.php, and registration2.php to extract sensitive database information or execute arbitrary SQL commands.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-03-24T11:27Z
EPSS history
Timeline
  • 24 MAR 11:27Z
    Matrimony Website Script M-Plus Multiple SQL Injection
    cvelistv5