Lucene search
+L

134 matches found

Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•8 views

PT-2026-95954

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A SQL injection flaw exists in the /Admin/edit symptom.php endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

7.5CVSS6.6AI score0.00431EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•7 views

PT-2026-95966

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A security flaw allows remote exploitation via cross site scripting XSS, a technique where malicious scripts are injected into trusted websites. The issue exists in the file /dr...

4.8CVSS5.3AI score0.00368EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/20 12:00 a.m.•9 views

CVE-2026-94033: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

5.1CVSS3.9AI score0.00348EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•7 views

PT-2026-95976

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description Cross site scripting XSS occurs in the User Management component within the file /drug recommender/Admin/add user. A remote attacker can execute this attack by manipulating the...

5.1CVSS5.8AI score0.00348EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/20 12:00 a.m.•8 views

CVE-2026-94016: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...

4.8CVSS4.1AI score0.00368EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•6 views

PT-2026-95977

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description An issue exists in the Password Change component within the file '/drug recommender/Admin/change password'. Remote attackers can perform cross-site scripting XSS—a technique use...

5.1CVSS5.6AI score0.00348EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/17 6:17 p.m.•17 views

CVE-2026-92927

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

6.9CVSS0.00532EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/17 5:45 p.m.•56 views

CVE-2026-92927 SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

6.9CVSS0.00532EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/17 5:45 p.m.•15 views

CVE-2026-92927 SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

6.9CVSS5.5AI score0.00532EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 5:45 p.m.•22 views

EUVD-2026-82366

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

6.9CVSS5.5AI score0.00532EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/17 5:45 p.m.•30 views

CVE-2026-92927

SourceCodester Drug Recommendation System 1.0 is vulnerable to information disclosure through remote manipulation of the file /db/drug_recommendor.sql . The exact processing affected is described as unknown, but an unauthenticated attacker can exploit it over the network with low complexity to ga...

6.9CVSS5.5AI score0.00532EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•3 views

CVE-2026-92927: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

6.9CVSS5.5AI score0.00532EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•11 views

PT-2026-95026

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description An issue exists in the processing of the file /db/drug recommendor.sql that allows for remote information disclosure through manipulation. Recommendations At the moment, there i...

6.9CVSS5.9AI score0.00532EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-33045

Malicious code in bioql PyPI...

9.8CVSS7.1AI score0.00633EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/05 5:06 a.m.•14 views

CVE-2024-10336

A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...

9.8CVSS7.2AI score0.00633EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/24 6:15 p.m.•16 views

CVE-2024-10338

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...

7.2CVSS5.8AI score0.00454EPSS
SaveExploits1References3
NVD
NVD
•added 2024/10/24 6:15 p.m.•68 views

CVE-2024-10337

A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...

7.2CVSS0.00454EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/10/24 6:00 p.m.•32 views

CVE-2024-10338 SourceCodeHero Clothes Recommendation System home.php sql injection

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...

5.8CVSS0.00454EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/10/24 6:00 p.m.•13 views

CVE-2024-10338 SourceCodeHero Clothes Recommendation System home.php sql injection

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...

5.8CVSS7.4AI score0.00454EPSS
SaveExploits1References3
CVE
CVE
•added 2024/10/24 6:00 p.m.•64 views

CVE-2024-10337

SourceCodeHero Clothes Recommendation System 1.0 contains a SQL injection vulnerability in the /admin/home.php?con=add endpoint. The vulnerability arises from manipulating the cat/subcat/t1/t2/text arguments, and the issue can be exploited remotely. Several connected sources corroborate the affec...

7.2CVSS5.6AI score0.00454EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder