CVE-2023-25432 | BDVDB-2026-196474 Detail

Description#

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer_0/admins/assessments/course/course-update.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/hundanchen69/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md

Exploit#

No public exploit known

History#

Version 12023-02-28Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.