CVE-2019-25635
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Mar 24, 2026
Vendor
unknown
Description
Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint. Attackers can inject SQL code via the up_cast, s_mother, and s_religion parameters to extract sensitive database information using time-based or error-based techniques.