| शीर्षक | SourceCodester Drug Recommendation System Using Machine Learning, PHP, and MySQL Database 1.0 SQL Injection |
|---|
| विवरण | A SQL Injection vulnerability (CWE-89) was found in SourceCodester Drug Recommendation System Using Machine Learning, PHP, and MySQL Database v1.0. The issue is present in the /drug_recommender/Admin/edit_user.php endpoint through the id GET parameter. The application does not properly validate the parameter before using it in an SQL query, allowing an unauthenticated attacker to manipulate the query and access sensitive information from the MySQL database. During testing, database information and sensitive records from the users and patients tables could be retrieved.
Product Website:
https://www.sourcecodester.com/php/18278/drug-recommender-web-app-student-project.html
RESEARCHERS:
Researcher 1: Karan Parelkar
Email: [email protected]
GitHub: https://github.com/KaranParelkar
LinkedIn: https://www.linkedin.com/in/karan-parelkar-6a370125b/
Researcher 2: Anubhav Verma
Email: [email protected]
GitHub: https://github.com/anubhavv106
LinkedIn: https://www.linkedin.com/in/anubhav-verma-7123a1232/
Researcher 3: Parth Desai
Email: [email protected]
GitHub: https://github.com/ParthD31
LinkedIn: https://www.linkedin.com/in/parth-desai-801951224/ |
|---|
| स्रोत | ⚠️ https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/sqli/edit_user/Readme.md |
|---|
| उपयोगकर्ता | anubhav106 (UID 98769) |
|---|
| सबमिशन | 24/08/2026 03:23 PM (27 दिन पहले) |
|---|
| संयम | 19/09/2026 05:22 PM (26 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 407955 [SourceCodester Drug Recommendation System 1.0 edit_user.php पहचान SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|