CVE-2026-93980
A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin
CVSS
7.3
High
EPSS
0.4%
p36
KEV
—
Exploit Today
11
0-100
Published: Sep 20, 2026 · Last modified: Sep 21, 2026 · CWE-74 · CWE-89
0.3%EPSS · 30 days0.4%
2026-09-212026-10-19
A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
- code-projects.orghttps://code-projects.org/
- github.comhttps://github.com/zzzxc643/CVE1/blob/main/2026-8-24/vul9.md
- vuldb.comhttps://vuldb.com/cve/CVE-2026-93980
- vuldb.comhttps://vuldb.com/submit/944594
- vuldb.comhttps://vuldb.com/vuln/407939
- vuldb.comhttps://vuldb.com/vuln/407939/cti
- vuldb.comhttps://vuldb.com/submit/944594
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1134078.8 HIG—
——0BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.2hCVE-2026-1134068.8 HIG—
——0BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.2hCVE-2026-1134058.8 HIG—
——0BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.2hCVE-2026-933007.5 HIG—
——0The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.4hCVE-2026-1123719.9 CRI—
——0A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.11hCVE-2026-1122527.3 HIG—
——0A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xp_cmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.14h