CVE-2026-93979
HighCVSS 7.3Summary
A security flaw has been discovered in code-projects Internship Management System 1.0 in the file /employer/login.php. Manipulating the Password argument results in SQL injection. The attack is possible remotely and the exploit has been released to the public.
Risk Assessment
An attacker could remotely execute arbitrary SQL queries, potentially leading to data disclosure, modification, or employer account takeover.
Recommendation
Immediately apply available patches or disable internet access to the application; implement input validation and parameterized queries.
Other vulnerabilities in Internship Management System
See all- CVE-2026-93980High
A weakness has been identified in code-projects Internship Management System 1.0 in the file /admin/login.php of the Admin Login Form component. Manipulating the Password argument leads to SQL injection. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-93978High
A vulnerability was identified in code-projects Internship Management System 1.0 in the file /login.php. Manipulating the Password argument leads to SQL injection. The attack can be executed remotely and the exploit is publicly available.
- CVE-2026-14701Medium
A SQL injection vulnerability was found in the Internship Management System 1.0 in the file employer/details/change_password.php. An attacker can remotely manipulate the Current argument, leading to SQL injection. The exploit is publicly available.
- CVE-2026-14700High
A SQL injection vulnerability has been found in the Internship Management System 1.0 in the employer/login.php file. An attacker can remotely manipulate the email/password arguments, leading to SQL injection. The exploit has been publicly disclosed.
Original NVD description (English source)
A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.