Description

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.3",
  "pubDate": "2026-09-20T11:16:57.953Z",
  "pubdate": "2026-09-20T11:16:57.953Z",
  "executiveSummary": "A critical SQL injection (SQLi) vulnerability exists within the authentication module of the Internship Management System 1.0. The flaw resides in the handling of the 'Password' argument within the '/login.php' script.\nThis vulnerability allows a remote, unauthenticated attacker to manipulate backend database queries by injecting arbitrary SQL commands. Successful exploitation can lead to unauthorized access to the application, potential bypass of authentication mechanisms, and full compromise of the underlying database.\nGiven that the exploit code is publicly available, the risk of active exploitation is significant. The lack of proper input sanitization and parameter binding facilitates this threat, making it a high-priority issue for remediation to prevent data exfiltration or administrative account takeover.",
  "technicalDetails": "The vulnerability is classified as an improper neutralization of special elements used in an SQL command (SQL Injection). The root cause is the insecure implementation of the authentication logic in '/login.php', where the user-supplied input provided via the 'Password' argument is concatenated directly into SQL query strings without sufficient sanitization, validation, or the use of prepared statements.\nThe attack flow initiates when an unauthenticated remote attacker sends a crafted HTTP request to '/login.php'. By embedding malicious SQL syntax within the 'Password' parameter, the attacker can alter the logic of the backend query execution. For instance, by injecting tautologies or union-based SQL operators, the attacker can manipulate the query to return true regardless of the provided credentials, effectively bypassing the authentication gate.\nFurthermore, the vulnerability allows for 'blind' or 'error-based' SQL injection techniques, enabling the attacker to extract sensitive information from the database, such as administrator credentials, user profiles, or system configuration data. Because the application interacts directly with the database via these unsanitized inputs, the attacker gains the ability to execute arbitrary commands within the context of the database management system (DBMS) user account utilized by the web application.\nThe attack is remotely exploitable over standard HTTP/HTTPS protocols without requiring any prior authentication or local network access. The availability of public exploits lowers the barrier to entry, allowing even low-skilled attackers to automate the discovery and exploitation of this flaw. Post-exploitation impact is severe, potentially resulting in full database compromise, unauthorized modification of records, and the total subversion of the Internship Management System's integrity and confidentiality."
}