CVE Catalog

CVE-2026-0697

MediumCVSS 4.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.36%

30th percentile - higher than 30% of all known CVEs

Summary

A flaw was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_admin.php. Manipulation of the admin_id argument causes SQL injection. The attack can be initiated remotely and the exploit has been published.

Risk Assessment

Potential unauthorized database operations, including disclosure or modification of administrative data. The public exploit increases the risk.

Recommendation

Update the application or fix the code using parameterized queries. Restrict admin panel access to trusted networks.

Other vulnerabilities in Intern Membership Management System

See all
Original NVD description (English source)

A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/edit_admin.php. This manipulation of the argument admin_id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS