Lucene search
+L

31 matches found

Kitploit
Kitploit
•added 2026/10/31 1:54 a.m.•23 views

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overvi...

6.1CVSS6.8AI score0.00471EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/30 10:01 p.m.•18 views

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overvi...

6.1CVSS6.8AI score0.00471EPSS
SaveExploits2
NVD
NVD
•added 2026/10/18 7:16 a.m.•22 views

CVE-2026-111942

A weakness has been identified in hrisikeshpal BloodBankManagementSystem 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and...

5.3CVSS0.00278EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/18 6:15 a.m.•45 views

CVE-2026-111942 hrisikeshpal Blood_Bank_Management_System abs.php cross site scripting

A weakness has been identified in hrisikeshpal BloodBankManagementSystem 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and...

5.3CVSS0.00278EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/18 6:15 a.m.•34 views

CVE-2026-111942

A cross-site scripting (XSS) vulnerability exists in the hrisikeshpal Blood_Bank_Management_System version 1.0.0 . The flaw is located in an unknown function within the /abs.php file, where improper neutralization of input during web page generation allows for the manipulation of the Search argum...

5.3CVSS3.5AI score0.00278EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/18 6:15 a.m.•12 views

CVE-2026-111942 hrisikeshpal Blood_Bank_Management_System abs.php cross site scripting

A weakness has been identified in hrisikeshpal BloodBankManagementSystem 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and...

5.3CVSS3.5AI score0.00278EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/18 6:15 a.m.•20 views

EUVD-2026-103402

A weakness has been identified in hrisikeshpal BloodBankManagementSystem 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and...

5.3CVSS3.5AI score0.00278EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/18 6:15 a.m.•11 views

CVE-2026-111942 hrisikeshpal Blood_Bank_Management_System abs.php cross site scripting

A weakness has been identified in hrisikeshpal BloodBankManagementSystem 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and...

5.3CVSS3.5AI score0.00278EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•16 views

PT-2026-116557

A weakness has been identified in hrisikeshpal Blood Bank Management System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public an...

5.3CVSS3.5AI score0.00278EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/18 12:00 a.m.•14 views

CVE-2026-111942: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in hrisikeshpal BloodBankManagementSystem 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and...

5.3CVSS3.5AI score0.00278EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/10/17 4:00 p.m.•13 views

Hrisikesh Pal Blood_Bank_Management_System Cross-site Scripting Vulnerability

Hrisikesh Pal BloodBankManagementSystem 1.0.0 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the Search field within the file/abs.php, which may lead to cross-site scripting attacks...

5.3CVSS5.1AI score0.00278EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/12/02 12:19 a.m.•32 views

CVE-2025-63535

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...

9.6CVSS6.1AI score0.00413EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/01 3:15 p.m.•27 views

CVE-2025-63526

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg parameter,...

5.4CVSS5.5AI score0.00352EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/12/01 12:00 a.m.•14 views

CVE-2025-63526

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg parameter,...

8.5CVSS5.5AI score0.00352EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•16 views

CVE-2025-63535: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...

9.6CVSS6.1AI score0.00413EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/01 12:00 a.m.•43 views

CVE-2025-63535

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...

9.6CVSS0.00413EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/01 12:00 a.m.•13 views

CVE-2025-63535

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...

9.6CVSS6.1AI score0.00413EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•24 views

Blood Bank Management System security vulnerabilities

Blood Bank Management System is a blood bank management system by shridhar shukla individual developer. A security vulnerability exists in Blood Bank Management System version 1.0, which stems from the abs.php component not cleaning up user input and could lead to cross-site scripting attacks...

8.5CVSS5.3AI score0.00352EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•8 views

CVE-2025-63526: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg parameter,...

8.5CVSS5.5AI score0.00352EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/27 12:00 a.m.•6 views

CVE-2024-10408: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Blood Bank Management up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /abs.php. The manipulation of the argument search leads to sql injection. The attack can be initiated remotely. The exploit has been...

8.8CVSS6.3AI score0.00545EPSS
SaveExploits1References1
Rows per page
Query Builder