CVE-2023-7131— code-projects Intern Membership Management System User Registration sql injection
Quick assessment
Affected
code-projects Intern Membership Management System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Intern Membership Management System是一个实习生会员管理系统。 Intern Membership Management System 存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-7131
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
code-projects Intern Membership Management System User Registration sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user_registration/ of the component User Registration. The manipulation of the argument userName leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249134 is the identifier assigned to this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Intern Membership Management System 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Intern Membership Management System是一个实习生会员管理系统。 Intern Membership Management System 存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| code-projects | Intern Membership Management System | 2.0 | - |
|
II. Public POCs for CVE-2023-7131
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-7131
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-7131 (2)
Other References for CVE-2023-7131 (1)
Same Patch Batch · code-projects · 2023-12-28 · 14 CVEs total
| CVE-2023-7138 | 6.3 MEDIUM | code-projects Client Details System HTTP POST Request admin sql injection |
| CVE-2023-7137 | 6.3 MEDIUM | code-projects Client Details System HTTP POST Request sql injection |
| CVE-2023-7128 | 6.3 MEDIUM | code-projects Voting System Admin Login sql injection |
| CVE-2023-7127 | 6.3 MEDIUM | code-projects Automated Voting System Login sql injection |
| CVE-2023-7126 | 6.3 MEDIUM | code-projects Automated Voting System Admin Login sql injection |
| CVE-2023-7129 | 5.5 MEDIUM | code-projects Voting System Voters Login sql injection |
| CVE-2023-7141 | 4.3 MEDIUM | code-projects Client Details System update-clients.php sql injection |
| CVE-2023-7140 | 4.3 MEDIUM | code-projects Client Details System manage-users.php sql injection |
| CVE-2023-7139 | 4.3 MEDIUM | code-projects Client Details System HTTP POST Request regester.php sql injection |
| CVE-2023-7124 | 4.3 MEDIUM | code-projects E-Commerce Site search.php cross site scripting |
| CVE-2023-7132 | 3.5 LOW | code-projects Intern Membership Management System User Registration cross site scripting |
| CVE-2023-7136 | 2.4 LOW | code-projects Record Management System Document Type doctype.php cross site scripting |
| CVE-2023-7135 | 2.4 LOW | code-projects Record Management System Offices offices.php cross site scripting |
IV. Related Vulnerabilities
Same product: Intern Membership Management System
-
CVE-2026-0850
code-projects Intern Membership Management System delete_act -
CVE-2026-0729
code-projects Intern Membership Management System add_activi -
CVE-2026-0728
code-projects Intern Membership Management System delete_adm -
CVE-2026-0701
code-projects Intern Membership Management System add_admin. -
CVE-2026-0700
code-projects Intern Membership Management System check_admi
Same vendor: code-projects
-
CVE-2026-101105
code-projects Matrimonial System Profile Creation Endpoint c -
CVE-2026-93980
code-projects Internship Management System Admin Login Form -
CVE-2026-93979
code-projects Internship Management System login.php sql inj -
CVE-2026-93978
code-projects Internship Management System login.php sql inj -
CVE-2026-93977
code-projects Assessment Management add-single-mark.php cros
Same weakness: CWE-89
-
CVE-2026-18443
Smart Manager <= 8.97.0 - Authenticated (Subscriber+) SQL In -
CVE-2026-96267
WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthent -
CVE-2026-103913
GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via -
CVE-2026-94539
SupportCandy <= 3.5.3 - Authenticated (Custom+) SQL Injectio -
CVE-2026-95865
Beaver Builder Page Builder <= 2.11.0.5 - Authenticated (Con
V. Comments for CVE-2023-7131
No comments yet