CVE-2024-10448

영향받는 버전: BloodBank Management System : 1.0 취약점 정보: 취약점 유형: 사이트 간 요청 위조 CSRF 심각도: 높음 상태: 패치되지 않음 취약한 엔드포인트: 경로: /file/delete.php?bid= 취약점 설명: BloodBank Management System의 혈액 요청 기능 에서 사이트 간 요청 위조CSRF 취약점이 발견되었습니다. 이 결함은 이 경로 /file/delete.php?bid=로 delete 요청을 보낼 때 발생하며, bid 매개변수를 통해 애플리케이션에서 삭제할 레코드...

CVE-2024-10605

영향받는 버전: BloodBank Management System : 1.0 취약점 정보: 취약점 유형: Cross Site Request Forgery CSRF 심각도: HIGH 상태: 미패치 취약한 엔드포인트: 경로: file/request.php 취약점 설명: 이 엔드포인트 /file/request.php에는 사이트 간 요청 위조CSRF가 존재하며, 이를 통해 원격 사용자가 로그인한 수신자 계정에서 선택한 병원의 사용 가능한 혈액 샘플에 대해 혈액 샘플 요청을 시작할 수 있습니다. 성공적인 악용은 피해자를 대신한 무단 작...

CVE-2024-10557

영향받는 버전: BloodBank Management System : 1.0 취약점 정보: 취약점 유형: 사이트 간 요청 위조 CSRF 심각도: 높음 상태: 패치되지 않음 취약한 엔드포인트: 경로: /file/updateprofile.php 취약점 설명: 이 엔드포인트 /file/updateprofile.php에 CSRF 취약점이 존재합니다. 원격 사용자가 병원의 사용자 세부 정보를 업데이트할 수 있으며, 공격자가 이메일부터 비밀번호까지 모든 정보를 업데이트할 수 있어 계정 탈취 가능성이 높아집니다. 성공적으로 악용될 경우...

CVE-2026-7731

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7732

A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file requestblood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-7732

A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file requestblood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-7731

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7732

CVE-2026-7732 affects code-projects BloodBank Managing System 1.0. The vulnerable element is an unknown function in request_blood.php, allowing an unrestricted upload. The attack can be executed remotely and the exploit is public. No remediation details are provided in the supplied documents.

EUVD-2026-26910

A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file requestblood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-7732

A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file requestblood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-7732 code-projects BloodBank Managing System request_blood.php unrestricted upload

A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file requestblood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-7732 code-projects BloodBank Managing System request_blood.php unrestricted upload

A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file requestblood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-7731 code-projects BloodBank Managing System get_state.php sql injection

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7731

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

EUVD-2026-26908

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7731

CVE-2026-7731 affects code-projects BloodBank Managing System 1.0. The vulnerability is an SQL injection in an unknown function within get_state.php triggered by manipulating the G_STATE_ID argument. It allows remote exploitation and the exploit has been publicly disclosed. Connected sources prov...

CVE-2026-7731 code-projects BloodBank Managing System get_state.php sql injection

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

PT-2026-36760

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file get state.php. The manipulation of the argument G STATE ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7731: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

Code-Projects BloodBank Managing System 注入漏洞

The Code-Projects BloodBank Managing System is an open-source blood bank management system developed by Code-Projects. Version 1.0 of the code-projects BloodBank Managing System contains a SQL injection vulnerability. This vulnerability arises from an unknown function in the getstate.php file,...