CVE-2019-25639 HIGH

CVE-2019-25639: Matrimony Website Script M-Plus Multiple SQL Injection

Vendor Matri4Web
Product Matrimony Website Script
Weakness CWE-89 · SQLi
Published March 24, 2026
Last update March 24, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, and cboCountry across simplesearch_results.php, advsearch_results.php, specialcase_results.php, locational_results.php, and registration2.php to extract sensitive database information or execute arbitrary SQL commands.

Key dates

02Disclosure timeline

March 24, 2026 CVE published
March 24, 2026 Record updated