CVE-2026-93997

7.3 HIGHpublic exploit available

Published 2026-09-20 · Updated 2026-09-21

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-74, CWE-89

Public exploit & PoC references

https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/sqli/edit_symptom_id_parameter/Readme.md

All references

https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/sqli/edit_symptom_id_parameter/Readme.md
https://vuldb.com/cve/CVE-2026-93997
https://vuldb.com/submit/944843
https://vuldb.com/vuln/407948
https://vuldb.com/vuln/407948/cti
https://www.sourcecodester.com/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-18766PoC
HIGHCVE-2026-18854
HIGHCVE-2026-18859
MEDIUMCVE-2026-18896PoC
HIGHCVE-2026-93959PoC
MEDIUMCVE-2026-93963PoC
HIGHCVE-2026-93972PoC
HIGHCVE-2026-93973PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.