CVE-2026-2223

HIGH

Fabian Online Reviewer System - Injection

Title source: rule

Description

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some unknown functionality of the file /system/system/students/assessments/pretest/take/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0001
EPSS Percentile 1.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

fabian/online_reviewer_system

Timeline

Published Feb 09, 2026
Tracked Since Feb 18, 2026