CVE-2023-3854

creationtimestamp| type| source ---|---|--- 2023-07-24 02:25:37+00:00| seen| https://t.me/cibsecurity/67132...

CVE-2023-3854 phpscriptpoint BloodBank POST Parameter search sql injection

A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/bloodgroupid leads to sql injection. It is possible to launch the attac...

CVE-2023-3854

CVE-2023-3854 affects phpscriptpoint BloodBank 1.1. The vulnerability is an SQL injection in the /search endpoint’s POST Parameter Handler, where manipulating the country, city, or blood_group_id arguments enables remote exploitation. Multiple sources corroborate the issue but do not provide a fi...