CVE-2026-111992

A SQL injection vulnerability exists in the Exam Module of the itsmeravitejak Online-Examination-System (versions up to e6208e630b14657999bbfe4c9912302d2a1e2449). The flaw is located within the Exam::startExam function in the exam.php file, where improper handling of the topicid argument allows f...