CVE-2026-102910

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0

Description A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries. The issue exists within an unknown function in the file /reviewer 0/admins/assessments/examproper/exam-delete.php via the manipulation of the test id variable.

Recommendations As a temporary workaround, restrict access to the file /reviewer 0/admins/assessments/examproper/exam-delete.php or avoid using the test id parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.