SQL Injection Vulnerability in SourceCodester Drug Recommendation System
CVE-2026-105177

5.1MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Drug Recommendation System
Vendor
CVE Published:
5 October 2026

What is CVE-2026-105177?

A security flaw has been found in the SourceCodester Drug Recommendation System version 1.0, specifically in the add_drug.php file within the Drug Creation component. This vulnerability allows attackers to exploit certain parameters such as txtname, cmdtype, txtusage, txtsideeffect, and cmdcontraindication, leading to an SQL injection attack. The exploit can be performed remotely, and there exists public exploit code, making it crucial for users to safeguard their systems against potential attacks.

Affected Version(s)

Drug Recommendation System 1.0

References

https://vuldb.com/vuln/413409
vdb-entrytechnical-description
https://vuldb.com/vuln/413409/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-105177
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

swj99557271 (VulDB User)
VulDB Vulnerability Moderation Team
.