High severity · published Sep 20, 2026
CVE-2026-93979
code-projects Internship Management System login.php sql injection
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Internship Management System · code-projects
1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-93979
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-93979
code-projects.org
https://code-projects.org/
github.com
https://github.com/zzzxc643/CVE1/blob/main/2026-8-24/vul7.md
vuldb.com
https://vuldb.com/cve/CVE-2026-93979
vuldb.com
https://vuldb.com/submit/944592
vuldb.com
https://vuldb.com/vuln/407938
vuldb.com
https://vuldb.com/vuln/407938/cti
More from Internship Management System
7.3
CVE-2026-93980
code-projects Internship Management System Admin Login Form login.php sql injection
7.3
CVE-2026-93978
code-projects Internship Management System login.php sql injection
7.3
CVE-2026-14700
code-projects Internship Management System Employer Login Endpoint login.php sql injection
6.3
CVE-2026-14701
code-projects Internship Management System Password Change Endpoint change_password.php sql injection