CVE-2026-105179

Published: Ott 05, 2026 Last Modified: Ott 05, 2026
ExploitDB:
Other exploit source:
Google Dorks:
LOW 2,0
Attack Vector: network
Attack Complexity: low
Privileges Required: high
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
LOW 2,7
Attack Vector: network
Attack Complexity: low
Privileges Required: high
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none
LOW 3,3
Access Vector: network
Access Complexity: low
Authentication: multiple
Confidentiality: partial
Integrity: none
Availability: none

Description

AI Translation Available

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

311

Missing Encryption of Sensitive Data

Draft
Common Consequences
Security Scopes Affected:
Confidentiality Integrity
Potential Impacts:
Read Application Data Modify Application Data
Applicable Platforms
All platforms may be affected
View CWE Details
https://vuldb.com/cve/CVE-2026-105179
https://vuldb.com/submit/970935
https://vuldb.com/vuln/413411
https://vuldb.com/vuln/413411/cti
https://www.sourcecodester.com/