CVE-2026-93979: code-projects Internship Management System login.php sql injection
A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be performed remotely and requires no privileges or user interaction. An attacker can target the Password argument handled by /employer/login.php.
Is exploit code available?
Yes. A public exploit has been released, so organizations running the affected application should treat exploitation attempts as plausible.
Which deployments are known to be affected?
The affected product is code-projects Internship Management System version 1.0. The available information does not state whether any particular configuration changes or mitigates exposure.