CVE-2026-2198

The CVE-2026-2198 entry concerns code-projects Online Reviewer System 1.0. The vulnerability is triggered by manipulation of the argument difficulty_id in an unknown function within /system/system/admins/assessments/pretest/loaddata.php, resulting in SQL injection. It is exploitable remotely, and...