CVE-2026-105178 MEDIUM

CVE-2026-105178: SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection

Vendor Sourcecodester

Product Drug Recommendation System

Weakness CWE-89 · SQLi

Published October 5, 2026

Last update October 5, 2026

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Key dates

02Disclosure timeline

October 5, 2026 CVE published

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-105178 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html AskarLabs — CWE-89 write-up SQL Injection

Related vulnerabilities

CVE-2026-105178: SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection

01Description

02Disclosure timeline

03References

04Related CVE