CVE-2026-2220

A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btnfunctions.php. Such manipulation of the argument difficultyid leads to sql injection. The attack can be executed remotely. The...

CVE-2026-2195

CVE-2026-2195 affects code-projects Online Reviewer System 1.0. The vulnerability lies in the file /system/system/admins/assessments/pretest/questions-view.php where manipulation of the ID argument enables SQL injection. It is remotely exploitable and the exploit has been publicly disclosed. Mult...