Sourcecodester Online Reviewer Management System vulnerabilities

CVE-2023-1038 [CRITICAL] CWE-89 CVE-2023-1038: A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management S A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected is an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t

CVE-2026-93972 [HIGH] CWE-74 CVE-2026-93972: A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/course/btn_functions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose

CVE-2026-95926 [HIGH] CWE-74 CVE-2026-95926: A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/pretest/btn_functions.php?action=update. This manipulation of the argument test_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been pu

CVE-2026-95927 [HIGH] CWE-74 CVE-2026-95927: A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/pretest/exam-delete.php. Such manipulation of the argument test_id leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

CVE-2026-93959 [HIGH] CWE-74 CVE-2026-93959: A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue a A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/course/btn_functions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed

CVE-2026-104123 [HIGH] CWE-74 CVE-2026-104123: A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by th A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. The manipulation of the argument Title results in sql injection. The attack may be launched remotely. The exploit is n

CVE-2026-105246 [HIGH] CWE-74 CVE-2026-105246: A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an un A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be initiated remotely. The exploit has been made public and co

CVE-2026-102910 [HIGH] CWE-74 CVE-2026-102910: A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The aff A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/examproper/exam-delete.php. The manipulation of the argument test_id results in sql injection. The attack can be launched remotely. The exploit has been released to the pub

CVE-2026-95925 [HIGH] CWE-74 CVE-2026-95925: A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected elem A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=update. The manipulation of the argument difficulty_id results in sql injection. The attack can be executed remotely. The exploit has been made public

CVE-2026-95924 [HIGH] CWE-74 CVE-2026-95924: A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=add. The manipulation of the argument difficulty_id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to t

CVE-2026-93973 [HIGH] CWE-74 CVE-2026-93973: A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted e A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/subject/btn_functions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and m

CVE-2026-105247 [HIGH] CWE-74 CVE-2026-105247: A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The attack can be launched remotely. The exploit has been pu

CVE-2026-105182 [HIGH] CWE-74 CVE-2026-105182: A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacte A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be performed from remote. The exploit has been released to t

CVE-2026-93974 [HIGH] CWE-74 CVE-2026-93974: A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unkno A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

CVE-2026-102909 [HIGH] CWE-74 CVE-2026-102909: A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/examproper/btn_functions.php. The manipulation of the argument access_code leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVE-2026-102908 [HIGH] CWE-74 CVE-2026-102908: A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue a A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly