CVE-2026-93972

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0

Description An issue exists in the file /reviewer 0/admins/assessments/course/btn functions.php where an unknown function fails to properly sanitize the courseID argument. This allows a remote attacker to perform SQL injection, a technique used to interfere with the queries that an application makes to its database.

Recommendations As a temporary mitigation, restrict access to the file /reviewer 0/admins/assessments/course/btn functions.php or avoid using the courseID argument until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.