code-projects Online Reviewer System vulnerabilities

Latest code-projects Online Reviewer System CVEs

Newest publication first

1. CVE-2026-108956 code-projects Online Reviewer System User Update btn_functions.php sql injection

   Published 2026-10-13

   Medium·CVSS 6.9 EPSS 0.26%

   A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The at...

2. CVE-2026-108948 code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes

   Published 2026-10-13

   Medium·CVSS 5.3 EPSS 0.33%

   A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. The manipulation of the argument usertype_id...

3. CVE-2026-4972 code-projects Online Reviewer System btn_functions.php cross site scripting

   Published 2026-03-27

   Medium·CVSS 4.8 EPSS 0.21%

   A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.php. Such manipulation of the argument Description leads to cross site scripting. T...

4. CVE-2026-2912 code-projects Online Reviewer System studentresult-view.php sql injection

   Published 2026-02-22

   Medium·CVSS 6.9 EPSS 0.38%

   A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument test_id results in sql injection. It is possible to launch the a...

5. CVE-2026-2224 code-projects Online Reviewer System btn_functions.php cross site scripting

   Published 2026-02-09

   Medium·CVSS 5.1 EPSS 0.24%

   A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /system/system/admins/manage/users/btn_functions.php. The manipulation of the argument firstname results in cross site scripting. It is possible to launch the attack...

6. CVE-2026-2223 code-projects Online Reviewer System index.php sql injection

   Published 2026-02-09

   Medium·CVSS 6.9 EPSS 0.48%

   A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some unknown functionality of the file /system/system/students/assessments/pretest/take/index.php. The manipulation of the argument ID leads to sql injection. It is p...

7. CVE-2026-2222 code-projects Online Reviewer System btn_functions.php cross site scripting

   Published 2026-02-09

   Medium·CVSS 4.8 EPSS 0.25%

   A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown functionality of the file /system/system/admins/manage/users/btn_functions.php. Executing a manipulation of the argument firstname can lead to cross site scrip...

8. CVE-2026-2221 code-projects Online Reviewer System Login index.php sql injection

   Published 2026-02-09

   Medium·CVSS 6.9 EPSS 0.40%

   A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried...

9. CVE-2026-2220 code-projects Online Reviewer System btn_functions.php sql injection

   Published 2026-02-09

   Medium·CVSS 6.9 EPSS 0.40%

   A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php. Such manipulation of the argument difficulty_id leads to sql injection. The attack can be executed...

10. CVE-2026-2199 code-projects Online Reviewer System user-delete.php sql injection

    Published 2026-02-09

    Medium·CVSS 6.9 EPSS 0.38%

    A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack...

11. CVE-2026-2198 code-projects Online Reviewer System loaddata.php sql injection

    Published 2026-02-09

    Medium·CVSS 6.9 EPSS 0.42%

    A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection. It is possible to la...

12. CVE-2026-2197 code-projects Online Reviewer System exam-delete.php sql injection

    Published 2026-02-09

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. It is possible to initiate the attack...

13. CVE-2026-2196 code-projects Online Reviewer System exam-update.php sql injection

    Published 2026-02-09

    Medium·CVSS 6.9 EPSS 0.44%

    A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. The attack may be performed...

14. CVE-2026-2195 code-projects Online Reviewer System questions-view.php sql injection

    Published 2026-02-08

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be c...

15. CVE-2026-2166 code-projects Online Reviewer System Login index.php sql injection

    Published 2026-02-08

    Medium·CVSS 6.9 EPSS 0.46%

    A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possib...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.