CVE-2026-94015: SourceCodester Drug Recommendation System edit_user.php sql injection
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability can be attacked remotely and requires no privileges or user interaction. Public exploit code is available, which may make exploitation more likely.
What component should be checked for exposure?
Check SourceCodester Drug Recommendation System 1.0 deployments for the /drug_recommender/Admin/edit_user.php endpoint. The affected input is the ID argument handled by that file.
What is the likely impact of successful exploitation?
Successful SQL injection can affect confidentiality, integrity, and availability, each with low impact according to the supplied severity vector.