CVE-2026-93974

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0

Description A flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This issue occurs in the file /reviewer 0/admins/assessments/databank/btn functions.php?action=remove through the manipulation of the ID argument.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the ID argument in the /reviewer 0/admins/assessments/databank/btn functions.php?action=remove endpoint until the issue is resolved.