CVE-2026-93973 SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

CVE-2026-93973 SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

CVE-2026-93972

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

EUVD-2026-83714

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

CVE-2026-93972

SourceCodester Online Reviewer Management System 1.0 contains a SQL injection vulnerability in the file /reviewer_0/admins/assessments/course/btn_functions.php, exploitable remotely via manipulation of the courseID parameter without authentication. The CNA rates the base severity as HIGH (CVSS v3...

CVE-2026-93963

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93963

itsourcecode Leave Management System 1.0 is vulnerable to SQL injection in the file /module/department/controller.php via manipulation of the DEPTID argument. The attack can be initiated remotely and requires low privileges (CVSS 3.1 score 6.3 – MEDIUM ), with low impact on confidentiality, integ...

EUVD-2026-83652

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93963 itsourcecode Leave Management System controller.php sql injection

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93963 itsourcecode Leave Management System controller.php sql injection

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93959

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

CVE-2026-93959

A SQL injection vulnerability exists in SourceCodester Online Reviewer Management System 1.0 , specifically in the file /reviewer_0/admins/assessments/course/btn_functions.php. The injection is triggered by manipulating the Course argument. The attack can be carried out remotely with no privilege...

CVE-2026-93959 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

CVE-2026-93959 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

EUVD-2026-83646

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

PT-2026-95995

Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An issue exists where the saveGallery function passes form data through a custom parser into the Joomla Input object. The data is subsequently read using ARRAY and STRING filter types...

PT-2026-95910

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the DEPTID argument within an unknown function of the /module/department/controller.php file. SQL injection is a...

CVE-2026-93963: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...