CVE-2026-0728

🗓️ 08 Jan 2026 20:32:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 6 Views🌐 WEB

CVE-2026-0728 affects code-projects Intern Membership Management System 1.0 via delete_admin.php, enabling sql injection through admin_id input.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-0728	8 Jan 202621:24	–	circl
CNNVD	Code-Projects Intern Membership Management System SQL注入漏洞	8 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-0728 code-projects Intern Membership Management System delete_admin.php sql injection	8 Jan 202620:32	–	cvelist
EUVD	EUVD-2026-1449	8 Jan 202620:32	–	euvd
NVD	CVE-2026-0728	8 Jan 202621:15	–	nvd
Positive Technologies	PT-2026-1978	8 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-0728	10 Jan 202605:41	–	redhatcve
Vulnrichment	CVE-2026-0728 code-projects Intern Membership Management System delete_admin.php sql injection	8 Jan 202620:32	–	vulnrichment

NVD

Vulners

Node

carmelo intern_membership_management_systemMatch1.0

[
  {
    "vendor": "code-projects",
    "product": "Intern Membership Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
code-projects	www.code-projects.org/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20delete_admin.php%20sql%20injection.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
admin_id	query param	/intern/admin/delete_admin.php	SQL injection vulnerability in admin_id parameter of /intern/admin/delete_admin.php	CWE-89, CWE-74

29 Apr 2026 01:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.14.7 - 7.2

CVSS 45.1

CVSS 25.8

CVSS 34.7

EPSS0.00014

SSVC