# SourceCodester Drug Recommendation System vulnerabilities

Source: https://junglewise.ai/threats/technologies/drug-recommendation-system  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/drug-recommendation-system.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 13 vulnerabilities in SourceCodester Drug Recommendation System: 0 in the last 7 days and 13 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-108920, was published on 12 October 2026. 2 vulnerabilities in the last four weeks, down 82% on the four before (11).

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 13
- All time: 13 (0 critical, 0 exploited in the wild)

## Latest SourceCodester Drug Recommendation System vulnerabilities

- [CVE-2026-108920: SourceCodester Drug Recommendation System cross-site scripting in Admin Record Tables](https://junglewise.ai/threats/cve-2026-108920-a-security-vulnerability-has-been-detected-in-sourcecodester) (medium, CVSS 4.3, published 12 Oct 2026)
- [CVE-2026-108919: SourceCodester Drug Recommendation System stored XSS in Student Registration](https://junglewise.ai/threats/cve-2026-108919-a-weakness-has-been-identified-in-sourcecodester-drug) (medium, CVSS 4.3, published 12 Oct 2026)
- [CVE-2026-105706: SourceCodester Drug Recommendation System CSRF protection bypass](https://junglewise.ai/threats/cve-2026-105706-a-weakness-has-been-identified-in-sourcecodester-drug) (medium, CVSS 4.3, published 6 Oct 2026)
- [CVE-2026-105705: SourceCodester Drug Recommendation System reflected/stored XSS in admin interface](https://junglewise.ai/threats/cve-2026-105705-a-security-flaw-has-been-discovered-in-sourcecodester-drug) (medium, CVSS 4.3, published 6 Oct 2026)
- [CVE-2026-105704: SourceCodester Drug Recommendation System authentication bypass in Auth Guard](https://junglewise.ai/threats/cve-2026-105704-a-vulnerability-was-identified-in-sourcecodester-drug) (high, CVSS 7.3, published 6 Oct 2026)
- [CVE-2026-105178: SourceCodester Drug Recommendation System SQL injection in symptom creation](https://junglewise.ai/threats/cve-2026-105178-a-security-flaw-has-been-discovered-in-sourcecodester-drug) (medium, CVSS 4.7, published 5 Oct 2026)
- [CVE-2026-105177: SourceCodester Drug Recommendation System SQL injection in drug creation](https://junglewise.ai/threats/cve-2026-105177-a-vulnerability-was-identified-in-sourcecodester-drug) (medium, CVSS 4.7, published 5 Oct 2026)
- [CVE-2026-105176: SourceCodester Drug Recommendation System SQL injection in admin edit class](https://junglewise.ai/threats/cve-2026-105176-a-vulnerability-was-determined-in-sourcecodester-drug) (medium, CVSS 4.7, published 5 Oct 2026)
- [CVE-2026-105175: SourceCodester Drug Recommendation System SQL injection in Student Registration](https://junglewise.ai/threats/cve-2026-105175-a-vulnerability-was-found-in-sourcecodester-drug-recommendation) (high, CVSS 7.3, published 5 Oct 2026)
- [CVE-2026-94035: SourceCodester Drug Recommendation System stored XSS in profile](https://junglewise.ai/threats/cve-2026-94035-a-vulnerability-was-determined-in-sourcecodester-drug) (medium, CVSS 4.3, published 20 Sep 2026)
- [CVE-2026-94015: SourceCodester Drug Recommendation System SQL injection in edit_user](https://junglewise.ai/threats/cve-2026-94015-a-vulnerability-was-identified-in-sourcecodester-drug) (high, CVSS 7.3, published 20 Sep 2026)
- [CVE-2026-93997: SourceCodester Drug Recommendation System SQL injection in edit_symptom.php](https://junglewise.ai/threats/cve-2026-93997-a-weakness-has-been-identified-in-sourcecodester-drug) (high, CVSS 7.3, published 20 Sep 2026)
- [CVE-2026-92927: SourceCodester Drug Recommendation System hardcoded credentials disclosure](https://junglewise.ai/threats/cve-2026-92927-sourcecodester-drug-recommendation-system-hardcoded-credentials) (medium, CVSS 5.3, published 17 Sep 2026)

## Most severe SourceCodester Drug Recommendation System vulnerabilities

- [CVE-2026-94015: SourceCodester Drug Recommendation System SQL injection in edit_user](https://junglewise.ai/threats/cve-2026-94015-a-vulnerability-was-identified-in-sourcecodester-drug) (high, CVSS 7.3, published 20 Sep 2026)
- [CVE-2026-93997: SourceCodester Drug Recommendation System SQL injection in edit_symptom.php](https://junglewise.ai/threats/cve-2026-93997-a-weakness-has-been-identified-in-sourcecodester-drug) (high, CVSS 7.3, published 20 Sep 2026)
- [CVE-2026-105175: SourceCodester Drug Recommendation System SQL injection in Student Registration](https://junglewise.ai/threats/cve-2026-105175-a-vulnerability-was-found-in-sourcecodester-drug-recommendation) (high, CVSS 7.3, published 5 Oct 2026)
- [CVE-2026-105704: SourceCodester Drug Recommendation System authentication bypass in Auth Guard](https://junglewise.ai/threats/cve-2026-105704-a-vulnerability-was-identified-in-sourcecodester-drug) (high, CVSS 7.3, published 6 Oct 2026)
- [CVE-2026-92927: SourceCodester Drug Recommendation System hardcoded credentials disclosure](https://junglewise.ai/threats/cve-2026-92927-sourcecodester-drug-recommendation-system-hardcoded-credentials) (medium, CVSS 5.3, published 17 Sep 2026)
- [CVE-2026-105178: SourceCodester Drug Recommendation System SQL injection in symptom creation](https://junglewise.ai/threats/cve-2026-105178-a-security-flaw-has-been-discovered-in-sourcecodester-drug) (medium, CVSS 4.7, published 5 Oct 2026)
- [CVE-2026-105177: SourceCodester Drug Recommendation System SQL injection in drug creation](https://junglewise.ai/threats/cve-2026-105177-a-vulnerability-was-identified-in-sourcecodester-drug) (medium, CVSS 4.7, published 5 Oct 2026)
- [CVE-2026-105176: SourceCodester Drug Recommendation System SQL injection in admin edit class](https://junglewise.ai/threats/cve-2026-105176-a-vulnerability-was-determined-in-sourcecodester-drug) (medium, CVSS 4.7, published 5 Oct 2026)
- [CVE-2026-94035: SourceCodester Drug Recommendation System stored XSS in profile](https://junglewise.ai/threats/cve-2026-94035-a-vulnerability-was-determined-in-sourcecodester-drug) (medium, CVSS 4.3, published 20 Sep 2026)
- [CVE-2026-108919: SourceCodester Drug Recommendation System stored XSS in Student Registration](https://junglewise.ai/threats/cve-2026-108919-a-weakness-has-been-identified-in-sourcecodester-drug) (medium, CVSS 4.3, published 12 Oct 2026)

## Vulnerabilities per week

2 vulnerabilities in the last four weeks, down 82% on the four before (11).

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 4 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 7 | 0 | 0 |
| 12 Oct 2026 | 2 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other SourceCodester technologies

- [SourceCodester Class and Exam Timetabling System](https://junglewise.ai/threats/technologies/class-and-exam-timetabling-system): 56 vulnerabilities
- [SourceCodester Inventory Management System](https://junglewise.ai/threats/technologies/inventory-management-system): 16 vulnerabilities
- [SourceCodester Online Reviewer Management System](https://junglewise.ai/threats/technologies/online-reviewer-management-system): 15 vulnerabilities
- [SourceCodester Performance Indicator System](https://junglewise.ai/threats/technologies/performance-indicator-system): 10 vulnerabilities
- [SourceCodester Simple Online Food Ordering System](https://junglewise.ai/threats/technologies/simple-online-food-ordering-system): 10 vulnerabilities
- [SourceCodester Pharmacy Sales and Inventory System](https://junglewise.ai/threats/technologies/pharmacy-sales-and-inventory-system): 9 vulnerabilities
- [SourceCodester CET Automated Grading System with AI Predictive Analytics](https://junglewise.ai/threats/technologies/cet-automated-grading-system-with-ai-predictive-analytics): 7 vulnerabilities
- [SourceCodester Online Food Ordering System](https://junglewise.ai/threats/technologies/online-food-ordering-system): 7 vulnerabilities
- [SourceCodester Smart Attendance System with QR Code Scanner](https://junglewise.ai/threats/technologies/smart-attendance-system-with-qr-code-scanner): 7 vulnerabilities
- [SourceCodester Syllabus-Aligned Learning Management & Examination System](https://junglewise.ai/threats/technologies/syllabus-aligned-learning-management-examination-system): 7 vulnerabilities
- [SourceCodester Multi-Vendor Online Grocery Management System](https://junglewise.ai/threats/technologies/multi-vendor-online-grocery-management-system): 6 vulnerabilities
- [SourceCodester Online-Examination-And-Learning-Management-System](https://junglewise.ai/threats/technologies/online-examination-learning-management-system): 6 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "SourceCodester Drug Recommendation System vulnerabilities", https://junglewise.ai/threats/technologies/drug-recommendation-system, 13 November 2026.
