CVE-2025-11481: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donateblood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be...

CVE-2024-45984

A Cross Site Scripting XSS vulnerability in adddonor.php of Blood Bank And Donation Management System 1.0 allows an attacker to inject malicious scripts that will be executed when the Donor List is viewed...

CVE-2024-45985: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability in updatecontact.php of Blood Bank and Donation Management System v1.0 allows an attacker to inject malicious scripts via the name parameter of the updatecontact.php...

CVE-2024-45984: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability in adddonor.php of Blood Bank And Donation Management System 1.0 allows an attacker to inject malicious scripts that will be executed when the Donor List is viewed...

CVE-2024-42560: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component updatepagedetails.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Details parameter...