CVE-2026-2198

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficultyid leads to sql injection. It is possible to launch the attack...

CVE-2026-2220

CVE-2026-2220 affects code-projects Online Reviewer System 1.0. The issue is an SQL injection in the file /system/system/admins/assessments/pretest/btn_functions.php caused by manipulating the difficulty_id argument. It can be exploited remotely and a public PoC exists. Impact is described as HIG...

CVE-2026-2198

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficultyid leads to sql injection. It is possible to launch the attack...