A vulnerability was found in code-projects Online Reviewer System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/system/students/assessments/pretest/take/index.php. The manipulation of the argument ID leads to sql injection.
This vulnerability is traded as CVE-2026-2223. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
