Online Reviewer System vulnerabilities

2 known vulnerabilities in Online Reviewer System from SourceCodester. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Online Reviewer System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-109620Oct 13, 2026SourceCodester

  A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to

• 9.8 Critical severity

  Online Reviewer System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-2596May 9, 2023SourceCodester

  A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /reviewer/system/system/admins/manage/users/user-update.php of the component GET Parameter Handl