Online Reviewer System SQL Injection and Mass Assignment

SQL injection in code-projects Online Reviewer System 1.0 allows unauthenticated remote attackers to manipulate database queries via the User Update Handler at /reviewer/system/system/admins/manage/users/btn_functions.php, potentially leading to unauthorized data access or modification. The flaw has publicly available exploit code (Proof-of-Concept) and requires only network access to a deployed instance; no authentication or user interaction is needed per the CVSS vector (PR:N/UI:N). Rated moderate with a CVSS 4.0 base score of 5.5, exploitation could compromise the confidentiality, integrity, and availability of the application's data.

Privilege escalation in code-projects Online Reviewer System 1.0 allows an authenticated low-privilege user to raise their own account privileges by tampering with the usertype_id parameter submitted to the User Profile Update Handler. Exploitation is remote, requires a valid pre-existing account (CVSS PR:L) with network reachability to the admin/manage path, and requires no user interaction or non-default configuration; impact is limited to integrity and availability, with no confidentiality loss (VC:N). Publicly available exploit code exists (a proof-of-concept published on GitHub as an 'Online Reviewer-System-Privilege-Escalation'), and the VulDB-derived CVSS 4.0 base of 5.3 with an E:P exploit maturity flag indicates a functioning, easy-to-reuse attack; there is no CISA KEV confirmation of active exploitation, and the issue remains low-to-moderate and low priority despite the working public exploit.