CVE-2026-105175

A SQL injection vulnerability exists in the SourceCodester Drug Recommendation System 1.0 within the Student Registration component. The flaw is located in the processing of the /Auth/add_student.php file, where the manipulation of the cmdschool argument allows for remote execution of SQL command...

EUVD-2026-92160

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...