CVE-2026-92927— SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure
Quick assessment
Affected
SourceCodester Drug Recommendation System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 SourceCodester Drug Recommendation System 1.0 中发现了一个漏洞。该问题影响文件 的某些未知处理过程。通过执行特定的操纵操作，会导致信息泄露。该攻击可远程实施，且漏洞利用方式已公开，可被实际利用。
Possible ATT&CK Techniques 3 AI
T1213.003 · Code Repositories T1213.002 · Sharepoint T1213 · Data from Information RepositoriesAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SourceCodester | Drug Recommendation System | 1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92927
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drug_recommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Drug Recommendation System | 1.0 |
cpe:2.3:a:sourcecodester:drug_recommendation_system:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-92927
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92927
请登录查看更多情报信息。
Other References for CVE-2026-92927 (2)
IV. Related Vulnerabilities
Same vendor: SourceCodester
-
CVE-2026-92406
SourceCodester Inventory and Monitoring System btn_functions -
CVE-2026-92405
SourceCodester Inventory and Monitoring System index.php sql -
CVE-2026-92385
SourceCodester Online Food Ordering System Category Update u -
CVE-2026-91005
SourceCodester Online Faculty Clearance System Profile Pictu -
CVE-2026-91004
SourceCodester Online Faculty Clearance System delete_facult
Same weakness: CWE-200
-
CVE-2026-45726
Omni: Reader-level users can retrieve imported cluster CA ke -
CVE-2026-54649
punchin-email: Operator inbox (FORWARD_TO) disclosed to corr -
CVE-2026-85717
AsyncHttpClient: Client-wide realm credentials re-sent to a -
CVE-2026-69197
Umbraco: Delivery API leaks protected (Public Access) conten -
CVE-2026-75523
Steeltoe.Management.Endpoint: HttpExchanges URI masking leak
V. Comments for CVE-2026-92927
No comments yet