CVE-2026-2173
HIGHFabian Online Examination System - Injection
Title source: ruleDescription
A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely.
Scores
CVSS v3
7.3
EPSS
0.0003
EPSS Percentile
9.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Classification
CWE
CWE-74
CWE-89
Status
published
Affected Products (1)
fabian/online_examination_system
Timeline
Published
Feb 08, 2026
Tracked Since
Feb 18, 2026