CVE-2026-14657: code-projects Assessment Management Database Query marking-scheme.php sql injection
A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions[] causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14657?
CVE-2026-14657 has a medium severity score of 6.3.
What does CVE-2026-14657 affect?
CVE-2026-14657 affects the Code-projects Assessment Management 1.0 in the marking-scheme.php file.
How does CVE-2026-14657 exploit SQL injection?
CVE-2026-14657 exploits SQL injection through manipulation of the argument squestions[] in the database query handler.
Is CVE-2026-14657 remotely exploitable?
Yes, CVE-2026-14657 can be exploited remotely.
How can I mitigate CVE-2026-14657?
Mitigation of CVE-2026-14657 involves validating and sanitizing user inputs, especially those handled by the marking-scheme.php file.