CVE-2022-40877

CVE-2022-40877 concerns the Exam Reviewer Management System 1.0, where the vulnerability is a SQL Injection in the id parameter. The available documents consistently identify the affected software as Exam Reviewer Management System 1.0, with the root cause being lack of input validation in the id...

CVE-2022-40878

CVE-2022-40878 affects the Exam Reviewer Management System 1.0. An authenticated attacker can upload a web-shell PHP file via the profile page, leading to Remote Code Execution (RCE) . The vulnerability arises from an insecure file-upload path on the profile page, enabling arbitrary code executio...