CVE-2026-93973

SourceCodester Online Reviewer Management System 1.0 is affected by a SQL injection vulnerability in the file /reviewer_0/admins/assessments/subject/btn_functions.php?action=remove. Manipulating the ID argument allows remote, unauthenticated attackers to inject SQL, resulting in low impact on con...

CVE-2026-93973 SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

CVE-2026-93972

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972

SourceCodester Online Reviewer Management System 1.0 contains a SQL injection vulnerability in the file /reviewer_0/admins/assessments/course/btn_functions.php, exploitable remotely via manipulation of the courseID parameter without authentication. The CNA rates the base severity as HIGH (CVSS v3...

CVE-2026-93972 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

EUVD-2026-83714

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93963

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93963 itsourcecode Leave Management System controller.php sql injection

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

EUVD-2026-83652

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93963

itsourcecode Leave Management System 1.0 is vulnerable to SQL injection in the file /module/department/controller.php via manipulation of the DEPTID argument. The attack can be initiated remotely and requires low privileges (CVSS 3.1 score 6.3 – MEDIUM ), with low impact on confidentiality, integ...

CVE-2026-93963 itsourcecode Leave Management System controller.php sql injection

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93959

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

EUVD-2026-83646

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

CVE-2026-93959 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

CVE-2026-93959 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

CVE-2026-93959

A SQL injection vulnerability exists in SourceCodester Online Reviewer Management System 1.0 , specifically in the file /reviewer_0/admins/assessments/course/btn_functions.php. The injection is triggered by manipulating the Course argument. The attack can be carried out remotely with no privilege...

CVE-2026-93979: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

PT-2026-95943

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This issue occurs in th...

PT-2026-95951

Name of the Vulnerable Software and Affected Versions code-projects Internship Management System version 1.0 Description A remote SQL injection exists in the /login.php endpoint. This issue occurs when the Password variable is manipulated, allowing an attacker to interfere with the database...