A vulnerability described as critical has been identified in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/edit_students.php. Such manipulation of the argument admin_id leads to sql injection.

This vulnerability is traded as CVE-2026-0698. The attack may be launched remotely. Furthermore, there is an exploit available.