Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-109620

SourceCodester Online Reviewer System index.php prepare sql injection

Description

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SourceCodester Online Reviewer System

  • 1.0affected

References