CVE-2026-0697
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A flaw was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_admin.php. Manipulation of the admin_id argument causes SQL injection. The attack can be initiated remotely and the exploit has been published.
Risk Assessment
Potential unauthorized database operations, including disclosure or modification of administrative data. The public exploit increases the risk.
Recommendation
Update the application or fix the code using parameterized queries. Restrict admin panel access to trusted networks.
Other vulnerabilities in Intern Membership Management System
See all- CVE-2026-0701Medium
A SQL injection vulnerability was identified in code-projects Intern Membership Management System 1.0 in the file /intern/admin/add_admin.php. Manipulation of the Username argument allows remote exploitation, and a public exploit may be used.
- CVE-2026-0699Medium
A vulnerability was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_activity.php. Manipulation of the activity_id argument leads to SQL injection. The exploit is publicly available and can be used remotely.
- CVE-2026-0698Medium
A vulnerability has been found in code-projects Intern Membership Management System 1.0 affecting an unknown function of /intern/admin/edit_students.php. Manipulation of the admin_id argument leads to SQL injection, and the attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Original NVD description (English source)
A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/edit_admin.php. This manipulation of the argument admin_id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

