CVE-2026-2196: code-projects Online Reviewer System exam-update.php sql injection
A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument testid results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2196?
CVE-2026-2196 is classified as a high severity SQL injection vulnerability.
How do I fix CVE-2026-2196?
To fix CVE-2026-2196, sanitize and validate the input for the test_id parameter in the exam-update.php file.
What are the potential impacts of CVE-2026-2196?
Exploiting CVE-2026-2196 can allow an attacker to execute arbitrary SQL queries on the database.
What version of Online Reviewer System is affected by CVE-2026-2196?
CVE-2026-2196 affects version 1.0 of the code-projects Online Reviewer System.
Where is the vulnerable code located in CVE-2026-2196?
The vulnerability in CVE-2026-2196 is located in the exam-update.php file within the /system/system/admins/assessments/pretest/ directory.