CVE-2026-0699

🗓️ 08 Jan 2026 06:32:05Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 10 Views🌐 WEB

SQL injection in edit_activity.php via activity_id in code-projects system enables exploitation.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-0699	8 Jan 202609:24	–	circl
CNNVD	Code-Projects Intern Membership Management System SQL注入漏洞	8 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-0699 code-projects Intern Membership Management System edit_activity.php sql injection	8 Jan 202606:32	–	cvelist
EUVD	EUVD-2026-1585	8 Jan 202606:32	–	euvd
NVD	CVE-2026-0699	8 Jan 202607:15	–	nvd
Positive Technologies	PT-2026-1973	8 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-0699	9 Jan 202610:19	–	redhatcve
Vulnrichment	CVE-2026-0699 code-projects Intern Membership Management System edit_activity.php sql injection	8 Jan 202606:32	–	vulnrichment

NVD

Vulners

Node

carmelo intern_membership_management_systemMatch1.0

[
  {
    "vendor": "code-projects",
    "product": "Intern Membership Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
code-projects	www.code-projects.org/
github	www.github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20activity.php%20sql%20injection.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
activity_id	query param	/intern/admin/edit_activity.php	SQL injection via activity_id parameter in edit_activity.php (remote exploitation possible).	CWE-74, CWE-89

17 Jun 2026 10:11Current

5Medium risk

Vulners AI Score5

CVSS 3.14.7 - 7.2

CVSS 45.1

CVSS 25.8

CVSS 34.7

EPSS0.00313

SSVC