CVE-2026-93978

5.5 mediumEPSS 0.4%

Medium (5.5). EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2026-09-20
Modified: 2026-09-21
Record from: the NVD, synced 2026-10-19

References

https://code-projects.org/
https://github.com/zzzxc643/CVE1/blob/main/2026-8-24/vul6.md
https://vuldb.com/cve/CVE-2026-93978
https://vuldb.com/submit/944591
https://vuldb.com/vuln/407937

Check your stack JSON