CVE-2026-93959

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0

Description An issue exists in the processing of the file /reviewer 0/admins/assessments/course/btn functions.php where improper handling of the Course argument allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate the database.

Recommendations As a temporary workaround, restrict access to the file /reviewer 0/admins/assessments/course/btn functions.php or avoid using the Course argument until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.