CVE-2026-93972

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

EUVD-2026-83714

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972

SourceCodester Online Reviewer Management System 1.0 contains a SQL injection vulnerability in the file /reviewer_0/admins/assessments/course/btn_functions.php, exploitable remotely via manipulation of the courseID parameter without authentication. The CNA rates the base severity as HIGH (CVSS v3...

CVE-2026-93972: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

PT-2026-95939

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description An issue exists in the file /reviewer 0/admins/assessments/course/btn functions.php where an unknown function fails to properly sanitize the courseID argument. This allow...

EUVD-2023-43550

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2013-1834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated...

CVE-2023-39850

Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php...

CVE-2023-39850

Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php...

CVE-2023-39850: Improper Neutralization of Special Elements used in an SQL Command

Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php...

Schoolmate SQL injection vulnerability

Schoolmate is a PHP/MySQL solution for elementary, middle and high schools from mrmunkey22 Individual Developer. A security vulnerability exists in Schoolmate v1.3 that stems from the $courseid and $teacherid parameters in DeleteFunctions.php containing multiple SQL injection vulnerabilities...

Moodle allows remote authenticated users to reassign notes

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...

WS-2014-0058

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized courseId, evalName, teamName, toStudent, fromStudent attributes in SubmissionsDb...

WS-2014-0057

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized feedbackSessionName, courseId, creatorEmail in FeedbackSessionsDb...

WS-2014-0055

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized courseId, feedbackSessionName in studentFeedbackResults.jsp...

CVE-2013-1834

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...

CVE-2013-1834: Undefined Security Weakness

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...

CVE-2013-1834

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...