CVE-2026-0728: code-projects Intern Membership Management System delete_admin.php sql injection
A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0728?
CVE-2026-0728 is a critical SQL injection vulnerability that can severely compromise the security of the affected system.
How do I fix CVE-2026-0728?
To fix CVE-2026-0728, sanitize and validate all inputs to the delete_admin.php file to prevent SQL injection.
What systems are affected by CVE-2026-0728?
CVE-2026-0728 affects the Code-projects Intern Membership Management System version 1.0.
How does CVE-2026-0728 work?
CVE-2026-0728 exploits insecure handling of the admin_id parameter in delete_admin.php to perform SQL injection attacks.
Can CVE-2026-0728 be exploited remotely?
Yes, CVE-2026-0728 can be exploited remotely by manipulating the admin_id parameter in HTTP requests.