This vulnerability exists in code-projects Matrimonial System 1.0 within the /search.php file's Regular Search component. An attacker can manipulate input parameters such as sex, mothertongue, maritialstatus, country, state, religion, agemin, and agemax to perform SQL injection. This allows unauthorized SQL commands to be executed remotely without any privileges or user interaction. The vulnerability has been publicly disclosed but no information about active exploitation in the wild or vendor patches is provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database remotely. This may lead to unauthorized data access, modification, or deletion depending on the database privileges. The CVSS score of 6.9 reflects a medium impact with low complexity and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the vulnerable component and validating or sanitizing input parameters may reduce risk.