CPE
Internship Management System version 1.0 is vulnerable to unauthenticated remote SQL injection via the Password parameter in login.php, for which public exploit code is available.