CVE-2026-110696

Deferred Deferred - Pending Action

Information Disclosure in Online-Examination-System

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: VulDB

Description

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is an unknown function of the file dbtables.sql. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110696

EUVD

EUVD-2026-101704

Affected Vendors & Products

Vendor	Product	Version / Range
itsmeravitejak	Online-Examination-System	e6208e630b14657999bbfe4c9912302d2a1e2449

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure weakness in the itsmeravitejak Online-Examination-System. It exists in an unknown function of the dbtables.sql file. Manipulating this function could allow attackers to access sensitive data remotely. The exploit is publicly available, increasing the risk of attacks.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this vulnerability on a network or system. The vulnerability involves a potential information disclosure in the itsmeravitejak Online-Examination-System due to an issue in dbtables.sql.

Impact Analysis

If you use the affected Online-Examination-System, attackers could exploit this flaw to steal confidential information such as exam questions, user data, or other sensitive details. The remote attack vector means no physical access is required.

Compliance Impact

The vulnerability allows remote information disclosure through a manipulated dbtables.sql file, which could lead to unauthorized access to sensitive data. This may violate GDPR's data protection principles and HIPAA's confidentiality requirements if personal or health data is exposed.

Mitigation Strategies

Immediate steps include removing or disabling the affected dbtables.sql file if present, monitoring network traffic for unusual activity, and applying any available patches or updates from the vendor once they respond. Since the project has not responded yet, consider isolating the system if it is exposed to untrusted networks.

Hi! I’m here to help you understand CVE-2026-110696. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70