CVE-2026-93979mediumCWE-74CWE-89

CVE-2026-93979: medium-severity vulnerability in code-projects Internship Management System

code-projects Internship Management System login.php sql injection

Published · Updated

Follow this CVE+ Monitor Internship Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.4%
A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Internship Management System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — code-projects Internship Management System

In the same product, most dangerous first.

CVE-2026-93980MEDIUMcode-projects Internship Management System Admin Login Form login.php sql injectionEPSS 0.4%CVE-2026-93978MEDIUMcode-projects Internship Management System login.php sql injectionEPSS 0.4%CVE-2026-14700MEDIUMcode-projects Internship Management System Employer Login Endpoint login.php sql injectionEPSS 0.4%CVE-2026-14701MEDIUMcode-projects Internship Management System Password Change Endpoint change_password.php sql injectionEPSS 0.3%