CVE-2026-36920: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php...

CVE-2026-36919: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...

EUVD-2021-30948

Malicious code in bioql PyPI...

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

CVE-2023-2596

A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /reviewer/system/system/admins/manage/users/user-update.php of the component GET Parameter Handler. The manipulation of the argument...

Sql injection

A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /reviewer/system/system/admins/manage/users/user-update.php of the component GET Parameter Handler. The manipulation of the argument...

CVE-2023-2596: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /reviewer/system/system/admins/manage/users/user-update.php of the component GET Parameter Handler. The manipulation of the argument...

CVE-2021-44090: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter...

PT-2022-11981

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Reviewer System version 1.0 Description An SQL Injection issue exists via the password parameter. Recommendations For version 1.0, avoid using the password parameter in the affected API endpoint until the issue is resolve...

Remote code execution

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

CVE-2021-41646

The CVE-2021-41646 entry concerns Sourcecodester Online Reviewer System 1.0, where an attacker can achieve Remote Code Execution by uploading a maliciously crafted PHP file that bypasses image-upload filters. The vulnerability enables an attacker to run arbitrary PHP code on the server via a craf...

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

CVE-2021-41646: Unrestricted Upload of File with Dangerous Type

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

PT-2021-23365

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Reviewer System version 1.0 Description A Remote Code Execution RCE issue exists due to the ability to upload a maliciously crafted PHP file, which can bypass the image upload filters. Recommendations For Sourcecodester...