CVE-2023-25432

CVE-2023-25432 affects Online Reviewer Management System v1.0, with a SQL injection in the API endpoint reviewer_0/admins/assessments/course/course-update.php. The vulnerability allows direct commands to the background database; CVSS 3.1 base score 7.2 (HIGH) with network attack vector, low attac...

CVE-2023-25431

CVE-2023-25431 affects Online Reviewer Management System v1.0, with a XSS vulnerability exploitable via reviewer_0/admins/assessments/course/course-update.php. The issue is documented across multiple feeds (NVD/Red Hat/CVE lists) as an input/output reflection flaw that can be triggered through th...

CVE-2023-1038

CVE-2023-1038 affects SourceCodester Online Reviewer Management System 1.0. The vulnerability resides in an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php, where manipulation of the argument id leads to an SQL injection. It can be exploited remotely and the...