CVE-2026-0729

CVE Database · CVE-2026-0729

CVE-2026-0729

· MEDIUMAnalyzed

CVSS v3.1

4.7

CVSS v4.0

2.0

EPSS

0.33%

Published

Jan 8, 2026

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/add_activity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-74CWE-89CWE-89

Affected Products (1)

carmelo · intern_membership_management_systemvulnerable

References (5)

https://code-projects.org/

Product

https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20add_activity.php%20sql%20injection.md

ExploitThird Party Advisory

https://vuldb.com/?ctiid.340126

Permissions RequiredVDB Entry

https://vuldb.com/?id.340126

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.733004

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs