Online Reviewer System vulnerabilities
11 known vulnerabilities in Online Reviewer System from code-projects. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Online Reviewer System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to s
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument test_id results in sql injection. It is poss
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some unknown functionality of the file /system/system/students/assessments/pretest/take/index.php. The manipulation of the argument ID leads to sq
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is pos
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php. Such manipulation of the argument difficulty_id leads to sql injection. The at
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql in
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection.
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. It is possible to
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. The atta
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack
- 9.8 Critical severity
Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection.