A vulnerability identified as critical has been detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/add_activity.php. Performing a manipulation of the argument Title results in sql injection.
This vulnerability is known as CVE-2026-0729. Remote exploitation of the attack is possible. Furthermore, an exploit is available.