CVE-2026-92927: SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure

Published Sep 17, 2026

Updated

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Affected Software

1 affected component

Sourcecodester SourceCodester Drug Recommendation System=1.0

Event History

Sep 17, 2026

CVE Published

via MITRE·05:45 PM

Data Sourced

via MITRE·05:45 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue can be exploited remotely and requires no privileges or user interaction. An attacker able to reach the affected application could attempt to access or manipulate processing involving /db/drug_recommendor.sql.

Is exploit code available?

Yes. The exploit has been made public, which increases the likelihood of opportunistic exploitation.

What is the expected impact?

The reported impact is information disclosure with low confidentiality impact. No integrity or availability impact is indicated by the provided severity vector.