HIGH

CVE-2026-93959

2026-09-20 CVSS v3.1

CVSS

7.3

Description

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/course/btn_functions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Weakness (CWE)

CWE-74 Injection

CWE-89 SQL Injection

References

https://github.com/zliang512/cve/issues/1 https://vuldb.com/cve/CVE-2026-93959 https://vuldb.com/submit/944169 https://vuldb.com/vuln/407918 https://vuldb.com/vuln/407918/cti https://www.sourcecodester.com/

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE