Intern Membership Management System

CVE-2026-0850 Jan 11, 23:15 LOW POC Monitor

Intern Membership Management System versions up to 1.0 contains a vulnerability that allows attackers to sql injection (CVSS 4.7).

CVE-2026-0729 Jan 08, 22:16 LOW POC Monitor

SQL injection in the Intern Membership Management System 1.0 add_activity.php file allows authenticated administrators to manipulate the Title parameter and execute arbitrary database queries. Public exploit code exists for this vulnerability, and no patch is currently available. The flaw enables an authenticated attacker with high privileges to compromise data confidentiality and integrity.

CVE-2026-0728 Jan 08, 21:15 LOW POC Monitor

SQL injection in the Intern Membership Management System 1.0 admin deletion function allows authenticated attackers with high privileges to manipulate the admin_id parameter and execute arbitrary database queries remotely. Public exploit code is available for this vulnerability, which affects PHP-based deployments. The vulnerability enables unauthorized data access, modification, and potential denial of service with no patch currently available.

CVE-2026-0701 Jan 08, 08:15 LOW POC Monitor

SQL injection in the admin panel of code-projects Intern Membership Management System 1.0 allows authenticated attackers with high privileges to manipulate the Username parameter in /intern/admin/add_admin.php and execute arbitrary database queries. Public exploit code exists for this vulnerability, and no patch is currently available. Affected organizations should restrict administrative access and consider implementing input validation controls or upgrading to a patched version when available.

CVE-2026-0700 Jan 08, 07:15 MEDIUM POC This Month

Intern Membership Management System versions up to 1.0 contains a vulnerability that allows attackers to sql injection (CVSS 7.3).

CVE-2026-0699 Jan 08, 07:15 LOW POC Monitor

SQL injection in the Intern Membership Management System 1.0 admin panel allows authenticated attackers with high privileges to manipulate the activity_id parameter in edit_activity.php, potentially leading to unauthorized data access, modification, or deletion. Public exploit code exists for this vulnerability, though no patch is currently available.

CVE-2026-0698 Jan 08, 06:15 LOW POC Monitor

SQL injection in the Intern Membership Management System 1.0 admin panel allows authenticated attackers with high privileges to manipulate the admin_id parameter in /intern/admin/edit_students.php and execute arbitrary database queries. Public exploit code exists for this vulnerability, enabling attackers to read, modify, or delete sensitive data. No patch is currently available to remediate this issue.

CVE-2026-0697 Jan 08, 05:16 LOW POC Monitor

SQL injection in the Intern Membership Management System 1.0 admin panel allows remote attackers with high privileges to manipulate the admin_id parameter in /intern/admin/edit_admin.php, potentially enabling unauthorized data access or modification. Public exploit code exists for this vulnerability, and no patch is currently available.

CVE-2025-8495 Aug 03, 02:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-8494 Aug 03, 00:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-8493 Aug 02, 23:15 MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-8340 Jul 31, 01:15 LOW POC Monitor

Reflected cross-site scripting (XSS) in Intern Membership Management System 1.0 allows remote attackers to inject malicious scripts via the email parameter in fill_details.php, executable only with user interaction. The vulnerability has a publicly available exploit and affects the error message handler, resulting in integrity impact (CVSS 2.1, EPSS 0.07%). While the attack vector is network-accessible and requires minimal complexity, the low CVSS and EPSS scores reflect the necessity for user interaction and limited technical impact.

CVE-2025-8339 Jul 31, 01:15 MEDIUM POC This Month

SQL injection in code-projects Intern Membership Management System 1.0 allows unauthenticated remote attackers to manipulate the `user_name` and `password` parameters of the `/student_login.php` login endpoint, injecting arbitrary SQL logic into the backend database query. The flaw (CWE-74) can enable authentication bypass, unauthorized access to intern records, and potential data manipulation. Publicly available exploit code exists on GitHub, though EPSS sits at 0.07% (20th percentile) and the product is absent from CISA KEV, indicating no confirmed widespread exploitation at time of analysis.

CVE-2023-7132 Dec 28, 17:15 MEDIUM POC This Month

A vulnerability was found in code-projects Intern Membership Management System 2.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-7131 Dec 28, 17:15 CRITICAL POC Act Now

A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.