CVE-2026-0699
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A vulnerability was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_activity.php. Manipulation of the activity_id argument leads to SQL injection. The exploit is publicly available and can be used remotely.
Risk Assessment
Potential unauthorized database operations, including data disclosure, modification, or deletion. The public exploit increases the attack risk.
Recommendation
Apply a patch or replace the vulnerable code with parameterized queries. Until fixed, restrict access to the admin panel.
Other vulnerabilities in Intern Membership Management System
See all- CVE-2026-0701Medium
A SQL injection vulnerability was identified in code-projects Intern Membership Management System 1.0 in the file /intern/admin/add_admin.php. Manipulation of the Username argument allows remote exploitation, and a public exploit may be used.
- CVE-2026-0698Medium
A vulnerability has been found in code-projects Intern Membership Management System 1.0 affecting an unknown function of /intern/admin/edit_students.php. Manipulation of the admin_id argument leads to SQL injection, and the attack may be launched remotely. The exploit has been disclosed publicly and may be used.
- CVE-2026-0697Medium
A flaw was found in code-projects Intern Membership Management System 1.0 in an unknown function of /intern/admin/edit_admin.php. Manipulation of the admin_id argument causes SQL injection. The attack can be initiated remotely and the exploit has been published.
Original NVD description (English source)
A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS