CVE Tools
Track your stack

Online Reviewer System

21 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Online Reviewer System, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Online Reviewer System CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Online Reviewer System CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-0212
2026-031
2026-042
2026-050
2026-060
2026-070
2026-080
2026-090
2026-103
2026-110

Severity

How the 21 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical210%
  • High1257%
  • Medium210%
  • Low524%

Latest CVEs

The 15 most recently published vulnerabilities affecting Online Reviewer System.

  1. CVE-2026-109620SourceCodester Online Reviewer System index.php prepare sql injection7.3
  2. CVE-2026-108956code-projects Online Reviewer System User Update btn_functions.php sql injection7.3
  3. CVE-2026-108948code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes5.4
  4. CVE-2026-36920Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.2.7
  5. CVE-2026-36919Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.2.7
  6. CVE-2026-4972code-projects Online Reviewer System btn_functions.php cross site scripting2.4
  7. CVE-2026-2912code-projects Online Reviewer System studentresult-view.php sql injection7.3
  8. CVE-2026-2224code-projects Online Reviewer System btn_functions.php cross site scripting3.5
  9. CVE-2026-2223code-projects Online Reviewer System index.php sql injection7.3
  10. CVE-2026-2222code-projects Online Reviewer System btn_functions.php cross site scripting2.4
  11. CVE-2026-2221code-projects Online Reviewer System Login index.php sql injection7.3
  12. CVE-2026-2220code-projects Online Reviewer System btn_functions.php sql injection7.3
  13. CVE-2026-2199code-projects Online Reviewer System user-delete.php sql injection7.3
  14. CVE-2026-2198code-projects Online Reviewer System loaddata.php sql injection7.3
  15. CVE-2026-2197code-projects Online Reviewer System exam-delete.php sql injection7.3

Product grouping is registry-driven, with AI assist and human review. How it works