Intern Membership Management System vulnerabilities

A SQL injection vulnerability was identified in code-projects Intern Membership Management System 1.0 in the file /intern/admin/add_admin.php. Manipulation of the Username argument allows remote exploitation, and a public exploit may be used.

A vulnerability was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_activity.php. Manipulation of the activity_id argument leads to SQL injection. The exploit is publicly available and can be used remotely.

A vulnerability has been found in code-projects Intern Membership Management System 1.0 affecting an unknown function of /intern/admin/edit_students.php. Manipulation of the admin_id argument leads to SQL injection, and the attack may be launched remotely. The exploit has been disclosed publicly and may be used.

A flaw was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_admin.php. Manipulation of the admin_id argument causes SQL injection. The attack can be initiated remotely and the exploit has been published.