CVE-2026-108919

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/addstudent.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtpreviousschool causes cros...

EUVD-2026-97757

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/addstudent.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtpreviousschool causes cros...

CVE-2026-108919: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/addstudent.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtpreviousschool causes cros...

CVE-2026-105177

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

CVE-2026-105178

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqlirealescapestring of the file /Admin/addsymptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It is...

CVE-2026-105178 SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqlirealescapestring of the file /Admin/addsymptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It is...

CVE-2026-105178

A security flaw exists in SourceCodester Drug Recommendation System 1.0 within the Symptom Creation component. The vulnerability is located in the mysqli_real_escape_string function of the /Admin/add_symptom.php file. By manipulating the txtname argument, an attacker can perform a SQL injection a...

CVE-2026-105177 SourceCodester Drug Recommendation System Drug Creation add_drug.php sql injection

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

PT-2026-104672

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli real escape string of the file /Admin/add symptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It...

PT-2026-104671

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

CVE-2026-94033 SourceCodester Drug Recommendation System User Management add_user cross site scripting

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

CVE-2026-94016

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...

EUVD-2026-83739

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...

CVE-2026-94016 SourceCodester Drug Recommendation System add_symptom cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...

CVE-2026-94016

A cross-site scripting (XSS) flaw was identified in SourceCodester Drug Recommendation System 1.0 , specifically in the /drug_recommender/Admin/add_symptom endpoint. Manipulating the txtname parameter allows an authenticated remote attacker to inject and execute arbitrary script content, resultin...

CVE-2026-94016 SourceCodester Drug Recommendation System add_symptom cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...

CVE-2026-94016: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...

CVE-2026-94033: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

PT-2026-95966

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A security flaw allows remote exploitation via cross site scripting XSS, a technique where malicious scripts are injected into trusted websites. The issue exists in the file /dr...

PT-2026-95976

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description Cross site scripting XSS occurs in the User Management component within the file /drug recommender/Admin/add user. A remote attacker can execute this attack by manipulating the...