A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user_record.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The at...
Product
sourcecodester drug recommendation system vulnerabilities
17 published CVES affecting sourcecodester drug recommendation system, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 17
- Critical
- 0
- High
- 0
- Medium
- 17
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest sourcecodester drug recommendation system CVEs
Newest publication first
-
MediumCVSS 5.3 EPSS 0.26%
-
MediumCVSS 5.3 EPSS 0.40%
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtprevious...
-
MediumCVSS 5.3 EPSS 0.16%
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could...
-
CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.27%A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has bee...
-
CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication
PublishedMediumCVSS 6.9 EPSS 0.40%A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user_id leads to improper authentication. The attack can be executed remotely. The exploit is publicly...
-
CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption
PublishedMediumCVSS 5.1 EPSS 0.12%A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data....
-
MediumCVSS 5.1 EPSS 0.20%
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in...
-
CVE-2026-105177 SourceCodester Drug Recommendation System Drug Creation add_drug.php sql injection
PublishedMediumCVSS 5.1 EPSS 0.20%A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindicatio...
-
MediumCVSS 5.1 EPSS 0.20%
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been p...
-
MediumCVSS 6.9 EPSS 0.31%
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be e...
-
MediumCVSS 5.3 EPSS 0.47%
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The...
-
MediumCVSS 5.1 EPSS 0.35%
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword res...
-
MediumCVSS 5.1 EPSS 0.35%
A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross si...
-
MediumCVSS 4.8 EPSS 0.37%
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the at...
-
MediumCVSS 6.9 EPSS 0.43%
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drug_recommender/Admin/edit_user.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is pu...
-
MediumCVSS 6.9 EPSS 0.43%
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely....
-
CVE-2026-92927 SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure
PublishedMediumCVSS 6.9 EPSS 0.53%A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drug_recommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.