Azastor

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Reviewer Management System version 1.0 **Description** An issue exists in the processing of the file `/reviewer 0/admins/assessments/examproper/questions-view.php`. A remote attacker can perform a SQL injection—a technique used to interfere with the queries that an application makes to its database—by manipulating the `ID` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Reviewer Management System version 1.0 **Description** A remote SQL injection is possible due to improper handling of the `access code` argument within an unknown function in the `/reviewer 0/admins/assessments/examproper/btn functions.php` file. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `access code` argument in the `/reviewer 0/admins/assessments/examproper/btn functions.php` file until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Reviewer Management System version 1.0 **Description** A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries. The issue exists within an unknown function in the file `/reviewer 0/admins/assessments/examproper/exam-delete.php` via the manipulation of the `test id` variable. **Recommendations** As a temporary workaround, restrict access to the file `/reviewer 0/admins/assessments/examproper/exam-delete.php` or avoid using the `test id` parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.