CVE-2026-0701: code-projects Intern Membership Management System add_admin.php sql injection
A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/addadmin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0701?
CVE-2026-0701 has been classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-0701?
To fix CVE-2026-0701, sanitize user input in the affected /intern/admin/add_admin.php file to prevent SQL injection.
What does CVE-2026-0701 affect?
CVE-2026-0701 affects the Code-projects Intern Membership Management System version 1.0.
Can CVE-2026-0701 be exploited remotely?
Yes, CVE-2026-0701 can be exploited remotely through crafted requests that manipulate the Username argument.
What type of vulnerability is CVE-2026-0701?
CVE-2026-0701 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries.