CVE-2026-93972 | SourceCodester Online Reviewer Management System 1.0 btn_functions.php courseID sql injection

A vulnerability described as critical has been identified in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/course/btn_functions.php. Such manipulation of the argument courseID leads to sql injection.

This vulnerability is referenced as CVE-2026-93972. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More