This vulnerability in code-projects Internship Management System 1.0 allows remote attackers to perform SQL injection via manipulation of the Password parameter in the /admin/login.php file of the Admin Login Form component. The weakness enables unauthorized database queries, potentially compromising data confidentiality and integrity. The CVSS 4.0 score is 6.9 (medium severity), with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. Public exploit code exists, but no known active exploitation is reported. No official patch or vendor advisory is available to confirm remediation status.

Successful exploitation can lead to unauthorized SQL queries on the backend database, potentially allowing attackers to access or modify sensitive data. The impact is limited to confidentiality, integrity, and availability to a low degree. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the Password parameter in /admin/login.php. Review and harden input validation and parameterized queries in the affected component if source code access is possible.