CVE-2026-93997

HIGHCVSS 7.3

Description

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

Timeline

Published:September 20th, 2026 12:17 PM

Last modified:September 21st, 2026 3:17 PM

CVSS Scoring

CVSS v3: 7.3 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS v2: 7.5

Weaknesses (CWE)

CWE-74 CWE-89

References & Reports

Advisories, patches, and third-party reports

https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/sqli/edit_symptom_id_parameter/Readme.md
https://vuldb.com/cve/CVE-2026-93997
https://vuldb.com/submit/944843
https://vuldb.com/vuln/407948
https://vuldb.com/vuln/407948/cti
https://www.sourcecodester.com/

Source: NIST NVD · Data may lag official sources by up to one minute