CVE-2026-36920 - Vulnerability Analysis

Overview

Sourcecodester Online Reviewer System v1.0 contains a sql injection caused by unsanitized input in /system/system/admins/assessments/examproper/questions-view.php, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data theft or modification.

Mitigation

Update to the latest version or apply patches to sanitize SQL inputs.

References

• https://github.com/hubdk01/bug_report/blob/main/Sourcecodester/online-reviewer-system/SQL-1.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner