CVE-2026-2197: code-projects Online Reviewer System exam-delete.php sql injection
A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument testid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2197?
CVE-2026-2197 has a high severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2026-2197?
To fix CVE-2026-2197, sanitize and validate all user inputs, particularly the test_id parameter in the exam-delete.php file.
What kind of attack is associated with CVE-2026-2197?
CVE-2026-2197 is associated with SQL injection attacks that can manipulate queries and access unauthorized data.
Which software versions are affected by CVE-2026-2197?
CVE-2026-2197 affects version 1.0 of the code-projects Online Reviewer System.
How can I detect if my system is impacted by CVE-2026-2197?
You can detect if your system is impacted by CVE-2026-2197 by checking for vulnerabilities in the exam-delete.php file related to SQL injection.