CVE-2026-0699

CVE Database · CVE-2026-0699

CVE-2026-0699

· MEDIUMAnalyzed

CVSS v3.1

4.7

CVSS v4.0

2.0

EPSS

0.31%

Published

Jan 8, 2026

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-74CWE-89CWE-89

Affected Products (1)

carmelo · intern_membership_management_systemvulnerable

References (5)

https://code-projects.org/

Product

https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20activity.php%20sql%20injection.md

ExploitThird Party Advisory

https://vuldb.com/?ctiid.339976

Permissions RequiredVDB Entry

https://vuldb.com/?id.339976

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.733000

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs