CVE-2026-111873

The itsmeravitejak Online-Examination-System contains a SQL injection vulnerability within the AJAX Endpoint component. Specifically, the MySQLDB::topicslist function in the exammanger.php file fails to properly neutralize the subject argument, allowing for remote exploitation. While the product ...

EUVD-2026-103384

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of the file exammanger.php of the component AJAX Endpoint. The manipulation of the argument subject results in sql injection. The...