Description
A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 7.2/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Blood Bank System | 1.0 |
| code-projects | blood_bank_system | 1.0 |
References
- https://code-projects.org/Product
- https://github.com/xxx-www/cve/blob/main/sql8.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.282447Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.282447Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.432688Third Party Advisory, VDB Entry
Timeline
- Published
- Oct 30, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed