CVE Details
Basic Information
| Title | code-projects Intern Membership Management System delete_student.php sql injection |
|---|---|
| Type | cve |
| Published | 2025-08-02T23:32:09.041Z |
| Modified | 2025-08-02T23:32:09.041Z |
Product Information
| Vendor | code-projects |
|---|---|
| Product | Intern Membership Management System |
| Version | 1.0 |
CVSS Information
| Base Score | 6.9 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
AI Analysis
| AI Description | A critical SQL injection vulnerability exists in the delete_student.php file of the Intern Membership Management System. This allows remote attackers to inject malicious SQL code, potentially leading to data breaches. The issue is considered critical due to the high impact of SQL injection attacks. |
|---|---|
| AI Severity | High |
| AI Vendor | code-projects |
| AI Product | Intern Membership Management System |
| AI Version | 1.0 |
Affected Products
- code-projects Intern Membership Management System 1.0
Additional Information
| CWE List | CWE-89, CWE-74 |
|---|---|
| Source | VulDB |
Description
A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/delete_student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.