<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: carmelo</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-0701: A vulnerability was identified in code-projects Intern Membership Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-0701.html</link><guid>https://patchthecve.com/cve/CVE-2026-0701.html</guid><pubDate>Mon, 26 Oct 2026 21:10:00 +0000</pubDate><description>MEDIUM 4.7: A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/add_admin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remo</description></item><item><title>CVE-2026-0700: A vulnerability was determined in code-projects Intern Membership Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-0700.html</link><guid>https://patchthecve.com/cve/CVE-2026-0700.html</guid><pubDate>Mon, 26 Oct 2026 21:10:00 +0000</pubDate><description>HIGH 7.3: A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern/admin/check_admin.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been p</description></item><item><title>CVE-2026-0699: A vulnerability was found in code-projects Intern Membership Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-0699.html</link><guid>https://patchthecve.com/cve/CVE-2026-0699.html</guid><pubDate>Mon, 26 Oct 2026 21:10:00 +0000</pubDate><description>MEDIUM 4.7: A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. Remote exploitation of the attack is possible. The exploit</description></item><item><title>CVE-2026-0698: A vulnerability has been found in code-projects Intern Membership Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-0698.html</link><guid>https://patchthecve.com/cve/CVE-2026-0698.html</guid><pubDate>Mon, 26 Oct 2026 21:10:00 +0000</pubDate><description>MEDIUM 4.7: A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/edit_students.php. Such manipulation of the argument admin_id leads to sql injection. The attack may be launched remotely. The exploit has been disclose</description></item><item><title>CVE-2026-0697: A flaw has been found in code-projects Intern Membership Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-0697.html</link><guid>https://patchthecve.com/cve/CVE-2026-0697.html</guid><pubDate>Mon, 26 Oct 2026 21:10:00 +0000</pubDate><description>MEDIUM 4.7: A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/edit_admin.php. This manipulation of the argument admin_id causes sql injection. The attack may be initiated remotely. The exploit has been published </description></item></channel></rss>