Medium severity · published Jul 5, 2026
CVE-2026-14701
code-projects Internship Management System Password Change Endpoint change_password.php sql injection
6.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was detected in code-projects Internship Management System 1.0. This affects an unknown function of the file employer/details/change_password.php of the component Password Change Endpoint. The manipulation of the argument Current results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Internship Management System · code-projects
1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-14701
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-14701
code-projects.org
https://code-projects.org/
github.com
https://github.com/zzzxc643/CVE1/blob/main/assessment/vul8.md
vuldb.com
https://vuldb.com/cve/CVE-2026-14701
vuldb.com
https://vuldb.com/submit/846890
vuldb.com
https://vuldb.com/vuln/376297
vuldb.com
https://vuldb.com/vuln/376297/cti
More from Internship Management System
7.3
CVE-2026-93980
code-projects Internship Management System Admin Login Form login.php sql injection
7.3
CVE-2026-93979
code-projects Internship Management System login.php sql injection
7.3
CVE-2026-93978
code-projects Internship Management System login.php sql injection
7.3
CVE-2026-14700
code-projects Internship Management System Employer Login Endpoint login.php sql injection