Threat database

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

SourceCodester Simple Student Information System version 1.0 contains a cross-site scripting (XSS) vulnerability in the clean function of the searchresults.php file. This flaw allows remote attackers to manipulate the searchbox argument to execute malicious scripts. The vulnerability has a medium severity rating and has been publicly disclosed, though no official patch information is provided.

CVE-2026-105807 is a SQL injection vulnerability in SourceCodester Simple Student Information System version 1.0. The flaw exists in an unspecified part of the file searchquery.php and allows remote attackers to manipulate SQL queries. This vulnerability has a medium severity rating with a CVSS score of 6.9.

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

CVE-2026-105705 is a medium severity cross-site scripting (XSS) vulnerability in SourceCodester Drug Recommendation System version 1.0. The flaw exists in an unspecified function within the Admin/add_drug.php file and can be exploited remotely. Public exploit code is available, increasing the risk of attack. No patch or vendor advisory is currently provided.

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user_id leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and might be used.

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

CVE-2026-105182 is a SQL injection vulnerability in SourceCodester Online Reviewer Management System version 1.0. It affects an unknown function in the file /reviewer_0/admins/assessments/activities/btn_functions.php with the 'Title' argument. The vulnerability allows remote attackers to perform SQL injection attacks. The exploit code has been publicly released. The CVSS 4.0 score is 6.9, indicating a medium severity.

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-105178 is a medium severity SQL injection vulnerability in SourceCodester Drug Recommendation System version 1.0. The flaw exists in the mysqli_real_escape_string function within the /Admin/add_symptom.php file, specifically in the Symptom Creation component. An attacker can remotely manipulate the txtname argument to execute SQL injection attacks. Public exploit code is available, increasing the risk of exploitation.

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.

CVE-2026-104612 is a cross-site scripting (XSS) vulnerability in SourceCodester Student Result Management System version 1.0, specifically in the Announcement Module. The issue is due to improper sanitization of the title/announcement parameter in the script/academic/core/new_announcement.php file. This allows remote attackers to inject malicious scripts. The vulnerability has a medium severity score of 5.3 and an exploit has been publicly disclosed. No official patch or remediation guidance is currently provided by the vendor.

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. The manipulation of the argument Title results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

CVE-2026-102913 is a SQL injection vulnerability in SourceCodester Car Driving School Management System version 1.0. The flaw exists in an unspecified function within the file /classes/Master.php, specifically the save_enrollment function. This vulnerability allows remote attackers to manipulate SQL queries, potentially compromising the database. The exploit code has been publicly released, increasing the risk of exploitation. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a medium severity level.

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date_start/date_end leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

CVE-2026-102910 is a SQL injection vulnerability in SourceCodester Online Reviewer Management System version 1.0. The flaw exists in the exam-delete.php file where the test_id parameter can be manipulated to perform SQL injection. This vulnerability can be exploited remotely without authentication. Public exploit code is available, increasing the risk of attacks. The vulnerability has a medium severity with a CVSS score of 6.9.

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/examproper/btn_functions.php. The manipulation of the argument access_code leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.