Drug Recommendation System vulnerabilities

A cross-site request forgery (CSRF) vulnerability was identified in SourceCodester Drug Recommendation System 1.0 in an unknown function. The attack can be performed remotely and the exploit has been made publicly available.

A cross-site scripting (XSS) vulnerability was discovered in SourceCodester Drug Recommendation System 1.0 in Admin/add_drug.php. Input manipulation leads to client-side script execution. The attack can be performed remotely and the exploit has been publicly released.

SQL injection vulnerability in SourceCodester Drug Recommendation System 1.0. Affects the file /Auth/add_student.php in the Student Registration component, where manipulation of the cmdschool argument allows SQL injection. The attack can be executed remotely, and the exploit is public.