CVE-2026-110696: itsmeravitejak Online-Examination-System dbtables.sql information disclosure
A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is an unknown function of the file dbtables.sql. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of itsmeravitejak Online-Examination-System containing code up to commit e6208e630b14657999bbfe4c9912302d2a1e2449 may be exposed. The attack can be launched remotely and does not require privileges or user interaction according to the supplied severity vector.
What access does an attacker need to exploit it?
An attacker can attempt exploitation over the network with low attack complexity. No authentication, elevated privileges, or victim interaction is indicated in the provided vector.
What is the likely impact if exploitation succeeds?
The reported impact is information disclosure, with low confidentiality impact. No integrity or availability impact is indicated.
How can I determine whether my deployment is affected?
Compare the source used by your deployment with the reported affected commit and inspect whether it includes the affected dbtables.sql file. Because the project uses a rolling release model, no affected or fixed version numbers are provided.
Is public exploitation material available?
Yes. The report states that an exploit has been made publicly available and could be used in attacks.