CVE-2026-105177: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

CVE-2026-105176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

PT-2026-104670

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2026-105179: Missing Encryption of Sensitive Data

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

PT-2026-104739

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer 0/admins/assessments/Subject/btn functions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

PT-2026-104711

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer 0/admins/assessments/activities/btn functions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

CVE-2026-105182: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

CVE-2026-105175: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

PT-2026-104675

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105246: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2026-104612

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2026-104612 SourceCodester Student Result Management System Announcement new_announcement.php cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2026-104612 SourceCodester Student Result Management System Announcement new_announcement.php cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

EUVD-2026-91626

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2026-104612

The SourceCodester Student Result Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability within the Announcement Module . The flaw is located in the script/academic/core/new_announcement.php file, where the manipulation of the title/announcement argument allows for remote execu...

CVE-2026-104123

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

EUVD-2026-91164

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to SQL injection due to an unknown functionality in the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. By manipulating the Title argument, an attacker can execute arbitrary SQL commands. This...