CVE-2019-25635: Zeeways Matrimony CMS

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint. Attackers can inject SQL code via the up_cast, s_mother, and s_religion parameters to extract sensitive database information using time-based or error-based techniques.

Affected products

• Zeeways Matrimony CMS: affected versions not specified

Published 2026-03-24. Last modified 2026-06-17.