CVE-2026-111873

The itsmeravitejak Online-Examination-System contains a SQL injection vulnerability within the AJAX Endpoint component. Specifically, the MySQLDB::topicslist function in the exammanger.php file fails to properly neutralize the subject argument, allowing for remote exploitation. While the product ...