An unauthenticated SQL injection vulnerability in the code-projects Internship Management System 1.0 allows remote attackers to bypass authentication and extract sensitive data from the backend database.

The application fails to sanitize the password parameter in the /admin/login.php file before including it in a SQL query. This allows an unauthenticated attacker to inject malicious SQL commands, enabling time-based blind data exfiltration.

Successful exploitation of this vulnerability can lead to a complete compromise of the administrative interface and the underlying database, including the theft of user credentials and sensitive internship data. Given the CVSS score of 7.3, this represents a high-risk security flaw that could result in significant data breaches and unauthorized access to protected system functions.

Immediate Action: As no official patch is currently available, administrators should restrict access to the /admin/login.php endpoint via network-level controls or by disabling the application until a fix is provided by the vendor.

Proactive Monitoring: Review web server access logs for anomalous POST requests to the /admin/login.php endpoint, specifically looking for unusual character strings or time-delayed responses indicative of injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns, such as the use of sleep() or union select statements, within the password parameter.

Public Exploit Available: Yes, a published proof-of-concept exists, attributed to the research write-up provided in the referenced GitHub repository.

Due to the ease of exploitation and the lack of a vendor-supplied patch, this vulnerability poses a significant risk to any organization hosting the Internship Management System. We strongly recommend immediate isolation of the affected component and the implementation of robust WAF filtering to prevent unauthorized data access until a formal security update is released.