High severity · published Sep 20, 2026
CVE-2026-93980
code-projects Internship Management System Admin Login Form login.php sql injection
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Internship Management System · code-projects
1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-93980
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-93980
code-projects.org
https://code-projects.org/
github.com
https://github.com/zzzxc643/CVE1/blob/main/2026-8-24/vul9.md
vuldb.com
https://vuldb.com/cve/CVE-2026-93980
vuldb.com
https://vuldb.com/submit/944594
vuldb.com
https://vuldb.com/vuln/407939
vuldb.com
https://vuldb.com/vuln/407939/cti
More from Internship Management System
7.3
CVE-2026-93979
code-projects Internship Management System login.php sql injection
7.3
CVE-2026-93978
code-projects Internship Management System login.php sql injection
7.3
CVE-2026-14700
code-projects Internship Management System Employer Login Endpoint login.php sql injection
6.3
CVE-2026-14701
code-projects Internship Management System Password Change Endpoint change_password.php sql injection
