CVE-2019-25635

Publication date

2026-03-24 11:27:08

Family

VulnCheck

State

PUBLISHED

Description

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint. Attackers can inject SQL code via the up_cast, s_mother, and s_religion parameters to extract sensitive database information using time-based or error-based techniques.