CVE-2026-0701 MEDIUM

CVE-2026-0701: code-projects Intern Membership Management System add_admin.php sql injection

Vendor Code-Projects
Product Intern Membership Management System
Weakness CWE-89 · SQLi
Published January 8, 2026
Last update February 23, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/add_admin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Key dates

02Disclosure timeline

January 8, 2026 CVE published
February 23, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-2566 Fujian Kelixin Communication Command and Dispatch Platform get_extension_yl.php sql injection CVE-2023-0980 SourceCodester Yoga Class Registration System Status Update update_status.php sql injection CVE-2024-13152 SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel CVE-2016-15021 nickzren alsdb sql injection CVE-2023-38221 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)