---
id: CVE-2026-111870
title: >-
  itsmeravitejak Online-Examination-System admin.php isAdmin missing
  authentication
summary: >-
  A security flaw has been discovered in itsmeravitejak
  Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The
  affected element is the function isAdmin of the file admin/admin.php.
  Performing a manipulation results i…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-306
  - CWE-287
vendor: itsmeravitejak
product: Online-Examination-System
affected:
  - Online-Examination-System e6208e630b14657999bbfe4c9912302d2a1e2449
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-19T15:23:12.764469Z'
exploitAvailable: true
published: '2026-10-18'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T15:24:11.923Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111870'
references:
  - url: 'https://vuldb.com/vuln/421582'
    label: >-
      VDB-421582 | itsmeravitejak Online-Examination-System admin.php isAdmin
      missing authentication
  - url: 'https://vuldb.com/vuln/421582/cti'
    label: 'VDB-421582 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-111870'
    label: CVE-2026-111870 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1005047'
    label: >-
      Submit #1005047 | itsmeravitejak Online-Examination-System
      e6208e630b14657999bbfe4c9912302d2a1e2449 Missing Authentication
  - url: 'https://github.com/itsmeravitejak/Online-Examination-System/issues/4'
  - url: 'https://github.com/itsmeravitejak/Online-Examination-System/'
tags:
  - cve.org
  - exploit-available
epss: 0.00429
epssPercentile: 0.36985
ingestedAt: '2026-10-18T04:36:59.240Z'
---

## Overview

A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the file admin/admin.php. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `Online-Examination-System e6208e630b14657999bbfe4c9912302d2a1e2449`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.