Code-projects

Blood Bank

9 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2023-46022

Exploit
  • EPSS 0.46%
  • Published 14.11.2023 22:15:30
  • Last modified 21.11.2024 08:27:46

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter.

6.1

CVE-2023-46019

Exploit
  • EPSS 0.13%
  • Published 13.11.2023 23:15:07
  • Last modified 21.11.2024 08:27:46

Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter.

6.1

CVE-2023-46020

Exploit
  • EPSS 0.13%
  • Published 13.11.2023 23:15:07
  • Last modified 21.11.2024 08:27:46

Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters.

5.5

CVE-2023-46021

Exploit
  • EPSS 0.08%
  • Published 13.11.2023 23:15:07
  • Last modified 21.11.2024 08:27:46

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter.

5.5

CVE-2023-46014

Exploit
  • EPSS 0.1%
  • Published 13.11.2023 22:15:07
  • Last modified 21.11.2024 08:27:45

SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters.

6.1

CVE-2023-46015

Exploit
  • EPSS 0.13%
  • Published 13.11.2023 22:15:07
  • Last modified 21.11.2024 08:27:45

Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL.

6.1

CVE-2023-46016

Exploit
  • EPSS 0.13%
  • Published 13.11.2023 22:15:07
  • Last modified 21.11.2024 08:27:45

Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL.

5.5

CVE-2023-46017

Exploit
  • EPSS 0.08%
  • Published 13.11.2023 22:15:07
  • Last modified 21.11.2024 08:27:45

SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters.

5.5

CVE-2023-46018

Exploit
  • EPSS 0.08%
  • Published 13.11.2023 22:15:07
  • Last modified 21.11.2024 08:27:46

SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter.