CVE-2022-40878: Exam Reviewer Management System Project Exam Reviewer Management System

High severity, CVSS 8.8. EPSS: 23.2% chance of exploitation in the next 30 days.

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE).

Affected products

• Exam Reviewer Management System Project Exam Reviewer Management System: version 1.0 only

Published 2022-09-27. Last modified 2026-06-17.