CVE-2026-36919

The SourceCodester Online Reviewer System v1.0 is vulnerable to an SQL Injection flaw located in the /system/system/admins/assessments/examproper/exam-update.php file. The vulnerability stems from the improper neutralization of special elements used in an SQL command. While the exact technical ro...

CVE-2026-2196 code-projects Online Reviewer System exam-update.php sql injection

A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument testid results in sql injection. The attack may be performed from remote. The...