CVE-2026-14700: code-projects Internship Management System Employer Login Endpoint login.php sql injection
A security vulnerability has been detected in code-projects Internship Management System 1.0. The impacted element is an unknown function of the file employer/login.php of the component Employer Login Endpoint. The manipulation of the argument email/password leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14700?
The severity of CVE-2026-14700 is rated high with a score of 7.3.
How do I fix CVE-2026-14700?
To fix CVE-2026-14700, sanitize and validate user inputs to prevent SQL injection vulnerabilities.
What type of vulnerability is CVE-2026-14700?
CVE-2026-14700 is an SQL Injection vulnerability affecting the Employer Login Endpoint of the code-projects Internship Management System.
What component is affected by CVE-2026-14700?
CVE-2026-14700 affects the employer/login.php file in the code-projects Internship Management System.
Can CVE-2026-14700 be exploited remotely?
Yes, CVE-2026-14700 can be exploited remotely through manipulation of the email/password arguments.