CVE-2026-0698

CVE Database · CVE-2026-0698

CVE-2026-0698

· MEDIUMAnalyzed

CVSS v3.1

4.7

CVSS v4.0

2.0

EPSS

0.37%

Published

Jan 8, 2026

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/edit_students.php. Such manipulation of the argument admin_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-74CWE-89

Affected Products (1)

carmelo · intern_membership_management_systemvulnerable

References (5)

https://code-projects.org/

Product

https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20students_details.php%20sql%20injection.md

ExploitThird Party Advisory

https://vuldb.com/?ctiid.339975

Permissions RequiredVDB Entry

https://vuldb.com/?id.339975

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.732999

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs