CVE-2026-93980: code-projects Internship Management System Admin Login Form login.php sql injection

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-20 · updated 2026-09-21
Weakness: CWE-74

Description

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Affected products

code-projects Internship Management System: 1.0

References

https://code-projects.org/
https://github.com/zzzxc643/CVE1/blob/main/2026-8-24/vul9.md
https://vuldb.com/cve/CVE-2026-93980
https://vuldb.com/submit/944594
https://vuldb.com/vuln/407939
https://vuldb.com/vuln/407939/cti
https://vuldb.com/submit/944594

Get alerted when CVE-2026-93980 or the next vulnerability affects your stack