CVE-2026-108956High· 7.3▾ TwilightA vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11342Medium· 4.7A weakness has been identified in code-projects Online Course Registration 1.0
CVE-2025-11343High· 7.3A security vulnerability has been detected in code-projects Student Crud Operation 3.3
CVE-2025-11431Medium· 6.3A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0
CVE-2025-10841High· 7.3A security vulnerability has been detected in code-projects Online Bidding System 1.0
CVE-2025-10842High· 7.3A vulnerability was detected in code-projects Online Bidding System 1.0
CVE-2025-10813High· 7.3A vulnerability was found in code-projects Hostel Management System 1.0