Executive brief
The Internship Management System is a PHP-based staff and student management application. An unauthenticated attacker can inject malicious SQL code through the login password field to extract sensitive database records, such as customer credentials. This time-based blind SQL injection allows attackers to systematically retrieve data from the database by measuring response delays.
Technical details
A time-based blind SQL injection vulnerability exists in /login.php (lines 40–42) where the password parameter from $_POST is concatenated directly into a SQL query without escaping or prepared statements. An unauthenticated attacker can inject SQL expressions such as "and (select sleep(5))" to confirm injection and extract data character-by-character from any database table. The vulnerability requires no authentication and can be exploited remotely via HTTP POST requests.
Affected products
- code-projects Internship Management System 1.0
Timeline
- 2026-09-20: disclosed
- exploited: Exploit is publicly available and might be used