A vulnerability classified as critical has been found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection.

This vulnerability is known as CVE-2026-0699. Remote exploitation of the attack is possible. Furthermore, an exploit is available.