CVE-2026-108948Medium· 5.4▾ TwilightPoC availableA vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. T…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 29.7 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
Exploit / PoC code exists
0.3% → 0.3%
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. The manipulation of the argument usertype_id leads to dynamically-determined object attributes. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108956High· 7.3A vulnerability was identified in code-projects Online Reviewer System 1.0
CVE-2026-109620High· 7.3A vulnerability has been found in SourceCodester Online Reviewer System 1.0
CVE-2026-108938Medium· 5.3A flaw has been found in code-projects Matrimonial System 1.0
CVE-2026-108937Medium· 5.3A vulnerability was detected in code-projects Online Ticket Reservation System 1.0
CVE-2026-105188Low· 3.5A vulnerability was found in code-projects Human Resource Management System 1.0
CVE-2026-105173Low· 3.5A flaw has been found in code-projects Human Resource Management 1.0