CVE-2026-105177

MediumCVSS 4.7/10Last modified Oct 6, 2026

Description

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Oct 5, 2026
Last modified
Oct 6, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1051784.7A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escapCVE-2026-1051792.7A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_userCVE-2026-105184.3GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that CVE-2026-1051806.3A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the comCVE-2026-1051816.3A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1CVE-2026-1051827.3A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reCVE-2026-1051837.3A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/cCVE-2026-1051847.3A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the fCVE-2026-1051857.3A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. CVE-2026-1051866.3A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipuCVE-2026-1051876.3A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The CVE-2026-1051883.5A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality
CVE-2026-105177: Medium severity, CVSS 4.7 | Vulnix