Shridharshukl

Blood Bank Management System

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-63525

Exploit
  • EPSS 0.04%
  • Veröffentlicht 01.12.2025 15:15:51
  • Zuletzt bearbeitet 06.01.2026 21:15:43

An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges via crafted request to delete.php.

5.4

CVE-2025-63526

Exploit
  • EPSS 0.04%
  • Veröffentlicht 01.12.2025 15:15:51
  • Zuletzt bearbeitet 02.12.2025 03:05:32

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malic...

5.4

CVE-2025-63527

Exploit
  • EPSS 0.04%
  • Veröffentlicht 01.12.2025 15:15:51
  • Zuletzt bearbeitet 02.12.2025 03:05:14

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and hprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in respon...

5.4

CVE-2025-63528

Exploit
  • EPSS 0.04%
  • Veröffentlicht 01.12.2025 15:15:51
  • Zuletzt bearbeitet 02.12.2025 03:04:46

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the blooddinfo.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can i...

8.8

CVE-2025-63529

Exploit
  • EPSS 0.14%
  • Veröffentlicht 01.12.2025 15:15:51
  • Zuletzt bearbeitet 02.12.2025 03:04:27

A session fixation vulnerability exists in Blood Bank Management System 1.0 in login.php that allows an attacker to set or predict a user's session identifier prior to authentication. When the victim logs in, the application continues to use the atta...

9.8

CVE-2025-63531

Exploit
  • EPSS 0.18%
  • Veröffentlicht 01.12.2025 15:15:51
  • Zuletzt bearbeitet 02.12.2025 03:03:24

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By ...

8.8

CVE-2025-63532

  • EPSS 0.14%
  • Veröffentlicht 01.12.2025 00:00:00
  • Zuletzt bearbeitet 04.12.2025 18:08:16

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipul...

5.4

CVE-2025-63533

  • EPSS 0.04%
  • Veröffentlicht 01.12.2025 00:00:00
  • Zuletzt bearbeitet 04.12.2025 18:07:58

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in respon...

5.4

CVE-2025-63534

  • EPSS 0.04%
  • Veröffentlicht 01.12.2025 00:00:00
  • Zuletzt bearbeitet 03.12.2025 22:00:39

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the login.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject...

8.8

CVE-2025-63535

  • EPSS 0.14%
  • Veröffentlicht 01.12.2025 00:00:00
  • Zuletzt bearbeitet 03.12.2025 22:00:15

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulatin...