Janobe Online Reviewer System vulnerabilities

5 CVEs affecting Janobe Online Reviewer System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-36920, published 2026-04-13.

More from Janobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-41646, published 2021-10-29. Critical severity, CVSS 9.8. EPSS: 7.2% chance of exploitation in the next 30 days. Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters..
• CVE-2021-27130, published 2021-04-14. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload.
• CVE-2023-2596, published 2023-05-09. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file…
• CVE-2026-36920, published 2026-04-13. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.
• CVE-2026-36919, published 2026-04-13. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.