CVE-2026-95924

EUVD-2026-84994
A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=add. The manipulation of the argument difficulty_id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 36.91%
Common Weakness Enumeration
References
https://github.com/huliangjia/cve/issues/4
https://vuldb.com/cve/CVE-2026-95924
https://vuldb.com/submit/953303
https://vuldb.com/vuln/408546
https://vuldb.com/vuln/408546/cti
https://www.sourcecodester.com/