| عنوان | SourceCodester Drug Recommender Web App 1.0 Information Disclosure |
|---|
| الوصف | Description:
A vulnerability was found in SourceCodester Drug Recommender Web App 1.0. It has been declared as problematic. Affected is an unknown functionality of the file db/drug_recommendor.sql. The manipulation leads to the use of hard-coded credentials / sensitive information disclosure. Plaintext credentials are stored in the publicly distributed SQL dump and can be read by opening the file, without authentication. The exploit has been disclosed to the public and may be used. This vulnerability was discovered by Karan Parelkar, Anubhav Verma, and Parth Desai. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Product Website:
https://www.sourcecodester.com/php/18278/drug-recommender-web-app-student-project.html
RESEARCHERS:
Researcher 1: Karan Parelkar
Email: [email protected]
GitHub: https://github.com/KaranParelkar
LinkedIn: https://www.linkedin.com/in/karan-parelkar-6a370125b/
Researcher 2: Anubhav Verma
Email: [email protected]
GitHub: https://github.com/anubhavv106
LinkedIn: https://www.linkedin.com/in/anubhav-verma-7123a1232/
Researcher 3: Parth Desai
Email: [email protected]
GitHub: https://github.com/ParthD31
LinkedIn: https://www.linkedin.com/in/parth-desai-801951224/ |
|---|
| المصدر | ⚠️ https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/information_disclosure/Readme.md |
|---|
| المستخدم | anubhav106 (UID 98769) |
|---|
| ارسال | 21/08/2026 12:05 PM (27 أيام منذ) |
|---|
| الاعتدال | 17/09/2026 01:57 PM (27 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 406378 [SourceCodester Drug Recommendation System 1.0 /db/drug_recommendor.sql الكشف عن المعلومات] |
|---|
| النقاط | 20 |
|---|