CVE-2023-25432

creationtimestamp| type| source ---|---|--- 2023-02-28 20:27:46+00:00| seen| https://t.me/cibsecurity/59120...

CVE-2023-25432

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer0/admins/assessments/course/course-update.php...

CVE-2023-25432

CVE-2023-25432 affects Online Reviewer Management System v1.0, with a SQL injection in the API endpoint reviewer_0/admins/assessments/course/course-update.php. The vulnerability allows direct commands to the background database; CVSS 3.1 base score 7.2 (HIGH) with network attack vector, low attac...