CVE-2026-93974 in Online Reviewer Management System

Prediction

by VulDB Data Team • 09/19/2026

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-407933
• CPE: ready
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-93974
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-93974
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-93974/