CVE-2026-93973
HighCVSS 7.3Summary
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0 in the file /reviewer_0/admins/assessments/subject/btn_functions.php?action=remove. Manipulating the ID argument results in SQL injection. The attack can be initiated remotely and the exploit is now public.
Risk Assessment
An attacker could remotely execute arbitrary SQL queries, potentially leading to data disclosure, modification or deletion.
Recommendation
Immediately apply patches or isolate the application; implement input validation and parameterized queries.
Other vulnerabilities in Online Reviewer Management System
See all- CVE-2026-93974High
A flaw has been found in SourceCodester Online Reviewer Management System 1.0 in the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=remove. Manipulating the ID argument leads to SQL injection. The attack can be launched remotely and the exploit has been published.
- CVE-2026-93972High
A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0 in the file /reviewer_0/admins/assessments/course/btn_functions.php. Manipulating the courseID argument leads to SQL injection. The attack can be launched remotely and the exploit has been disclosed publicly.
Original NVD description (English source)
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/subject/btn_functions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.