CVE-2026-95957: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

CVE-2026-95927: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/pretest/exam-delete.php. Such manipulation of the argument testid leads to sql injection. The attack may be performed from remote. The...

PT-2026-97120

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description An issue exists where the manipulation of the difficulty id variable in the '/reviewer 0/admins/assessments/databank/btn functions.php?action=add' endpoint allows for SQL...

PT-2026-97125

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the test id argument within an unknown function in the '/reviewer 0/admins/assessments/pretest/btn...

CVE-2026-94035

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drugrecommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2026-94033

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

CVE-2026-94034

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-94035 SourceCodester Drug Recommendation System index.php cross site scripting

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drugrecommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

EUVD-2026-83751

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drugrecommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2026-94035

SourceCodester Drug Recommendation System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /drug_recommender/index.php, triggered by manipulating the full name argument. The attack is remotely launchable but requires user interaction . The CVSS 3.1 score is 4.3 (MEDIUM) w...

CVE-2026-94035 SourceCodester Drug Recommendation System index.php cross site scripting

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drugrecommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2026-94034

A cross-site scripting (XSS) vulnerability exists in SourceCodester Drug Recommendation System 1.0 , specifically in the Password Change component (file /drug_recommender/Admin/change_password). Manipulating the txtoldpassword/txtnewpassword parameters leads to XSS, with the attack vector being r...

CVE-2026-94034 SourceCodester Drug Recommendation System Password Change change_password cross site scripting

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-94034 SourceCodester Drug Recommendation System Password Change change_password cross site scripting

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

EUVD-2026-83750

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-94033 SourceCodester Drug Recommendation System User Management add_user cross site scripting

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

EUVD-2026-83749

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

CVE-2026-94033 SourceCodester Drug Recommendation System User Management add_user cross site scripting

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

CVE-2026-94033

A cross-site scripting (XSS) vulnerability affects the User Management component of SourceCodester Drug Recommendation System 1.0 , specifically in the file /drug_recommender/Admin/add_user. Manipulation of the txtname, txtemail, or txtpassword arguments enables the XSS payload. The attack is rem...

CVE-2026-94016

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...