Logo
Retour à la veille

CVE-2026-93959

Publié : 20 septembre 2026
Modifié : 20 septembre 2026
Lien officiel NVD
Score CVSS
7.3
HIGH

Description détaillée

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/course/btn_functions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/zliang512/cve/issues/1https://vuldb.com/cve/CVE-2026-93959https://vuldb.com/submit/944169https://vuldb.com/vuln/407918https://vuldb.com/vuln/407918/ctihttps://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-94084

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

VOIR DÉTAILS

CVE-2026-94083

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when there is a DoH2 request with an HTTP1 to HTTP2 upgrade). This requires app-layer.protocols.doh2 to be enabled, which is the default in 8.x versions.

VOIR DÉTAILS

CVE-2026-93958

A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used.

VOIR DÉTAILS