CVE-2026-0701
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A SQL injection vulnerability was identified in code-projects Intern Membership Management System 1.0 in the file /intern/admin/add_admin.php. Manipulation of the Username argument allows remote exploitation, and a public exploit may be used.
Risk Assessment
An attacker could execute arbitrary SQL queries, potentially leading to data disclosure, modification, or deletion and takeover of administrative accounts.
Recommendation
Update the application to a patched version or enforce parameterized queries; until then, restrict access to the administrative interface.
Other vulnerabilities in Intern Membership Management System
See all- CVE-2026-0699Medium
A vulnerability was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_activity.php. Manipulation of the activity_id argument leads to SQL injection. The exploit is publicly available and can be used remotely.
- CVE-2026-0698Medium
A vulnerability has been found in code-projects Intern Membership Management System 1.0 affecting an unknown function of /intern/admin/edit_students.php. Manipulation of the admin_id argument leads to SQL injection, and the attack may be launched remotely. The exploit has been disclosed publicly and may be used.
- CVE-2026-0697Medium
A flaw was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_admin.php. Manipulation of the admin_id argument causes SQL injection. The attack can be initiated remotely and the exploit has been published.
Original NVD description (English source)
A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/add_admin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS