CVE-2021-41646

The CVE-2021-41646 entry concerns Sourcecodester Online Reviewer System 1.0, where an attacker can achieve Remote Code Execution by uploading a maliciously crafted PHP file that bypasses image-upload filters. The vulnerability enables an attacker to run arbitrary PHP code on the server via a craf...

CVE-2023-2596

CVE-2023-2596 affects SourceCodester Online Reviewer System 1.0. The vulnerability is in the GET Parameter Handler of the file /reviewer/system/system/admins/manage/users/user-update.php, where manipulating the parameter user_id leads to SQL injection. Exploitation appears to be possible remotely...

CVE-2021-27130

Online Reviewer System 1.0 is affected by a SQL injection vulnerability that stems from an authentication bypass, enabling an attacker to bypass login and potentially upload a reverse shell. The flaw is documented across multiple sources (Red Hat, CNVD/CNNVD, CVE records) as a SQL injection throu...

CVE-2026-36920

The SourceCodester Online Reviewer System v1.0 is vulnerable to SQL Injection within the file /system/system/admins/assessments/examproper/questions-view.php. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. While the CVSS v3.1 score is 2.7 (...

CVE-2026-36919

The SourceCodester Online Reviewer System v1.0 is vulnerable to an SQL Injection flaw located in the /system/system/admins/assessments/examproper/exam-update.php file. The vulnerability stems from the improper neutralization of special elements used in an SQL command. While the exact technical ro...