CVE-2026-108938

Received Received - Intake

Path Traversal in Matrimonial System 1.0

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-108938

Affected Vendors & Products

Vendor	Product	Version / Range
code-projects	Matrimonial	System 1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-552	The product makes files or directories accessible to unauthorized actors, even though they should not be.
CWE-425	The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

Attack-Flow Graph

Executive Summary

This vulnerability is in Matrimonial System 1.0 by code-projects. It allows unauthorized access to files or directories due to improper handling of the matrimony.sql file. The issue can be exploited remotely without authentication.

Impact Analysis

An attacker could access sensitive files or directories on the system. This may lead to data leaks, unauthorized modifications, or further attacks if the exposed data is used maliciously.

Compliance Impact

This flaw could violate GDPR or HIPAA by exposing personal or health data. Unauthorized access risks non-compliance with data protection requirements, potentially leading to legal penalties or reputational damage.

Mitigation Strategies

Immediately restrict access to the matrimony.sql file in the db directory of the Matrimonial System. Review and remove any unnecessary file permissions. Apply patches or updates if available from the vendor. Monitor network traffic for unusual file access patterns.

Hi! I’m here to help you understand CVE-2026-108938. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70