CVE-2023-25431: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer0/admins/assessments/course/course-update.php...

CVE-2023-25432: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer0/admins/assessments/course/course-update.php...