CVE-2023-2596

CVE-2023-2596 affects SourceCodester Online Reviewer System 1.0. The vulnerability is in the GET Parameter Handler of the file /reviewer/system/system/admins/manage/users/user-update.php, where manipulating the parameter user_id leads to SQL injection. Exploitation appears to be possible remotely...

CVE-2023-2596 SourceCodester Online Reviewer System GET Parameter user-update.php sql injection

A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /reviewer/system/system/admins/manage/users/user-update.php of the component GET Parameter Handler. The manipulation of the argument...

Online Reviewer System SQL注入漏洞

Online Reviewer System is a software application. An online reviewer system. A SQL injection vulnerability exists in SourceCodester Online Reviewer System version 1.0, which stems from a problem in the file /reviewer/system/system/admins/manage/users/user-update.php, where an operation on the...

PT-2023-20386 · Unknown · Sourcecodester Online Reviewer System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Reviewer System version 1.0 Description: A critical issue was found in the system, affecting the file /reviewer/system/system/admins/manage/users/user-update.php, specifically the GET Parameter Handler component. The...

CVE-2023-25432

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer0/admins/assessments/course/course-update.php...

CVE-2023-25432

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer0/admins/assessments/course/course-update.php...

CVE-2023-25431

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer0/admins/assessments/course/course-update.php...

CVE-2023-25432

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer0/admins/assessments/course/course-update.php...

CVE-2023-25431

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer0/admins/assessments/course/course-update.php...

Sql injection

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer0/admins/assessments/course/course-update.php...

Cross site scripting

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer0/admins/assessments/course/course-update.php...

CVE-2023-25432

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer0/admins/assessments/course/course-update.php...

Online Reviewer Management System 跨站脚本漏洞

Online Reviewer Management System is an online reviewer management system. A security vulnerability exists in Online Reviewer Management System v1.0, which originates from an XSS vulnerability...

CVE-2023-25432

CVE-2023-25432 affects Online Reviewer Management System v1.0, with a SQL injection in the API endpoint reviewer_0/admins/assessments/course/course-update.php. The vulnerability allows direct commands to the background database; CVSS 3.1 base score 7.2 (HIGH) with network attack vector, low attac...

CVE-2023-25431

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer0/admins/assessments/course/course-update.php...

Online Reviewer Management System SQL注入漏洞

Online Reviewer Management System is an online reviewer management system. A security vulnerability exists in Online Reviewer Management System v1.0, which originates from a SQL injection vulnerability...

PT-2023-20057 · Unknown · Online Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Online Reviewer Management System version 1.0 Description: An issue was discovered in the Online Reviewer Management System, where there is a XSS vulnerability. This vulnerability can be exploited via the reviewer...

CVE-2023-25431

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer0/admins/assessments/course/course-update.php...

PT-2023-20058 · Unknown · Online Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Online Reviewer Management System version 1.0 Description: An issue was discovered in the Online Reviewer Management System, where a SQL injection can directly issue instructions to the background database system via the "reviewer...

CVE-2023-25431

CVE-2023-25431 affects Online Reviewer Management System v1.0, with a XSS vulnerability exploitable via reviewer_0/admins/assessments/course/course-update.php. The issue is documented across multiple feeds (NVD/Red Hat/CVE lists) as an input/output reflection flaw that can be triggered through th...