CVE-2026-36919 identifies a SQL Injection vulnerability in Sourcecodester Online Reviewer System v1.0, specifically within the exam-update.php script located at /system/system/admins/assessments/examproper/. This vulnerability could allow an attacker to inject malicious SQL code, potentially compromising the database integrity or confidentiality. The CVE record does not provide a CVSS score, remediation details, or evidence of exploitation in the wild. The affected version is noted as v1.0 without further granularity.

Successful exploitation of this SQL Injection vulnerability could lead to unauthorized data access, modification, or deletion within the application's database. However, the absence of detailed impact metrics or known exploits limits precise impact assessment. The vulnerability affects the integrity and confidentiality of data managed by the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the vulnerable component and apply input validation or parameterized queries if possible. Monitor vendor channels for updates regarding patches or mitigations.