제출 #942294: SourceCodester Drug Recommender Web App 1.0 Information Disclosure
| 제목 | SourceCodester Drug Recommender Web App 1.0 Information Disclosure |
|---|---|
| 설명 | Description: A vulnerability was found in SourceCodester Drug Recommender Web App 1.0. It has been declared as problematic. Affected is an unknown functionality of the file db/drug_recommendor.sql. The manipulation leads to the use of hard-coded credentials / sensitive information disclosure. Plaintext credentials are stored in the publicly distributed SQL dump and can be read by opening the file, without authentication. The exploit has been disclosed to the public and may be used. This vulnerability was discovered by Karan Parelkar, Anubhav Verma, and Parth Desai. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Product Website: https://www.sourcecodester.com/php/18278/drug-recommender-web-app-student-project.html RESEARCHERS: Researcher 1: Karan Parelkar Email: [email protected] GitHub: https://github.com/KaranParelkar LinkedIn: https://www.linkedin.com/in/karan-parelkar-6a370125b/ Researcher 2: Anubhav Verma Email: [email protected] GitHub: https://github.com/anubhavv106 LinkedIn: https://www.linkedin.com/in/anubhav-verma-7123a1232/ Researcher 3: Parth Desai Email: [email protected] GitHub: https://github.com/ParthD31 LinkedIn: https://www.linkedin.com/in/parth-desai-801951224/ |
| 원천 | ⚠️ https:/ |
| 사용자 | anubhav106 (UID 98769) |
| 제출 | 2026. 08. 21. PM 12:05 (29 날 ago) |
| 모더레이션 | 2026. 09. 17. PM 01:57 (27 days later) |
| 상태 | 수락 |
| VulDB 항목 | 406378 [SourceCodester Drug Recommendation System 1.0 /db/drug_recommendor.sql 정보 공개] |
| 포인트들 | 20 |