CVE-2026-2198 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assess…
Medium CVSS: 6.9

CVE-2026-2198

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Vendor
Fabian
Product
Online Reviewer System
CWE
CWE-74
Yayın Tarihi
2026-02-09 01:16:04
Güncelleme
2026-02-10 15:07:52
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Online Reviewer System MEDIUM Fabian 2026

Referanslar

https://code-projects.org/ https://github.com/tiancesec/CVE/issues/19 https://vuldb.com/?ctiid.344901 https://vuldb.com/?id.344901 https://vuldb.com/?submit.750017