A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/liaoliao-hla/cve/issues/2 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.344868 | Permissions Required VDB Entry |
| https://vuldb.com/?id.344868 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.750018 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.751858 | Third Party Advisory VDB Entry |
Configurations
History
10 Feb 2026, 15:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://code-projects.org/ - Product | |
| References | () https://github.com/liaoliao-hla/cve/issues/2 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.344868 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.344868 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.750018 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.751858 - Third Party Advisory, VDB Entry | |
| First Time |
Fabian
Fabian online Reviewer System |
|
| CPE | cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:* |
08 Feb 2026, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-08 17:15
Updated : 2026-02-10 15:12
NVD link : CVE-2026-2166
Mitre link : CVE-2026-2166
CVE.ORG link : CVE-2026-2166
JSON object : View
Products Affected
fabian
- online_reviewer_system