CVE-2026-93980
HighCVSS 7.3Summary
A weakness has been identified in code-projects Internship Management System 1.0 in the file /admin/login.php of the Admin Login Form component. Manipulating the Password argument leads to SQL injection. The attack can be performed remotely and the exploit is publicly available.
Risk Assessment
An attacker could remotely execute arbitrary SQL queries, potentially leading to data disclosure, modification or deletion, and admin account takeover.
Recommendation
Immediately apply patches or isolate the application from the internet; implement input validation and parameterized queries for the login form.
Other vulnerabilities in Internship Management System
See all- CVE-2026-93979High
A security flaw has been discovered in code-projects Internship Management System 1.0 in the file /employer/login.php. Manipulating the Password argument results in SQL injection. The attack is possible remotely and the exploit has been released to the public.
- CVE-2026-93978High
A vulnerability was identified in code-projects Internship Management System 1.0 in the file /login.php. Manipulating the Password argument leads to SQL injection. The attack can be executed remotely and the exploit is publicly available.
- CVE-2026-14701Medium
A SQL injection vulnerability was found in the Internship Management System 1.0 in the file employer/details/change_password.php. An attacker can remotely manipulate the Current argument, leading to SQL injection. The exploit is publicly available.
- CVE-2026-14700High
A SQL injection vulnerability has been found in the Internship Management System 1.0 in the employer/login.php file. An attacker can remotely manipulate the email/password arguments, leading to SQL injection. The exploit has been publicly disclosed.
Original NVD description (English source)
A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.