CVE-2026-0697

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/edit_admin.php. This manipulation of the argument admin_id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jan 8, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-06987.2A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /inter CVE-2026-06997.2A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/adm CVE-2026-07009.8A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern CVE-2026-07017.2A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functi CVE-2026-07027.5The VidShop – Shoppable Videos for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'fields' parameter in CVE-2026-07036.4The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwct CVE-2026-07049.1In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field CVE-2026-07056.7Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before b CVE-2026-07075.3A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authent CVE-2026-07086.5A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) inp CVE-2026-07097.2Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with CVE-2026-07108.4A flaw was found in SIPp. A remote attacker could exploit this by sending specially crafted Session Initiation Protocol (SIP) messages durin