itsmeravitejak CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM itsmeravitejak CVE published 2026-10-13

CVE-2026-108970

A SQL injection vulnerability was detected in the Online-Examination-System's Registration Form, specifically in the addNewUser function of database.php. The vulnerability is remotely exploitable and has a public exploit available. Defenders responsible for the Online-Examination-System, especially those managing remotely accessible systems, should assess exposure and prioritize verification of the system [truncated]

MEDIUM itsmeravitejak CVE published 2026-10-13

CVE-2026-108969

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument cookname/cookid leads to incorrect comparison. The attack can be executed remotely.