Back to CVE List

CVE-2026-14701

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score
6.3 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Vulnerability Description

A vulnerability was detected in code-projects Internship Management System 1.0. This affects an unknown function of the file employer/details/change_password.php of the component Password Change Endpoint. The manipulation of the argument Current results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-74
Source
NVD
Vendor
code-projects
Product
Internship Management System

External References

Discussion (0)

Add Comment

No comments yet. Be the first!