CVE-2026-108956 | code-projects Online Reviewer System 1.0 User Update btn_functions.php sql injection

October 11, 2026 Yanac

A vulnerability categorized as critical has been discovered in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection.

This vulnerability is traded as CVE-2026-108956. The attack may be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More