CVE-2026-2195: code-projects Online Reviewer System questions-view.php sql injection
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2195?
CVE-2026-2195 is classified as a high-severity SQL injection vulnerability in the Online Reviewer System.
How do I fix CVE-2026-2195?
To fix CVE-2026-2195, sanitize and validate user input in the questions-view.php file to prevent SQL injection.
Which software is affected by CVE-2026-2195?
CVE-2026-2195 affects the code-projects Online Reviewer System version 1.0.
What is the impact of exploiting CVE-2026-2195?
Exploiting CVE-2026-2195 can allow an attacker to execute arbitrary SQL queries, potentially compromising the database.
Is CVE-2026-2195 a known vulnerability?
Yes, CVE-2026-2195 is a recognized vulnerability listed in vulnerability databases and security advisories.