high7.2
CVE-2023-25432
An issue was discovered in Online Reviewer Management System v1.0.
Impact
An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer_0/admins/assessments/course/course-update.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Reviewer Management System Project | Online Reviewer Management System | Version 1.0 |