Code-Projects Blood Bank System 安全漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank System version 1.0, which stems from an incorrect manipulation of the parameter Bloodname that can lead to cross-site scripting attacks...

CVE-2025-1967 code-projects Blood Bank Management System donor.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /userdashboard/donor.php. The manipulation of the argument name leads to cross site scripting. The attack may be...

PT-2025-9734

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A vulnerability has been found in the code-projects Blood Bank Management System, affecting some unknown functionality of the file /user dashboard/donor.php. The manipulation o...

PT-2025-9623

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A problem has been found in the code-projects Blood Bank System, affecting some unknown functionality of the file /Blood/A+.php. The manipulation of the Availibility argument leads to...

CVE-2025-1904: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /Blood/A+.php. The manipulation of the argument Availibility leads to cross site scripting. The attack may be launched...

CVE-2025-1957: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /BBfile/Blood/o+.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has bee...

PT-2025-9714

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A problematic issue was discovered in the code, affecting the /BBfile/Blood/o+.php file. The manipulation of the Bloodname argument leads to cross-site scripting. This issue can be...

PT-2025-7662

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A vulnerability was found in the Blood Bank System, affecting the processing of the file /admin/user.php. The manipulation of the email argument leads to cross-site scripting. The attack...

PT-2025-7655

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A vulnerability has been found in the Blood Bank System, affecting some unknown functionality of the file /prostatus.php. The manipulation of the message argument leads to cross-site...

CVE-2024-12000 code-projects Blood Bank System Setting updatesettings.php cross site scripting

A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. Th...

PT-2024-17395 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A problem has been found in the Setting Handler component, specifically in the /controllers/updatesettings.php file. The issue affects some unknown processes and can be exploited...

PT-2024-16400

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A problem was found in the code, affecting an unknown part of the file /file/request.php. This leads to cross-site request forgery and can be initiated remotely. The issue has...

CVE-2024-10506

CVE-2024-10506 affects code-projects Blood Bank System 1.0. A SQL injection vulnerability exists in the /admin/blood/update/B-.php file through manipulation of the Bloodname parameter. Exploitation can be performed remotely; the exploit has been disclosed publicly. Multiple sources corroborate th...

CVE-2024-10506: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-10448 code-projects Blood Bank Management System delete.php cross-site request forgery

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be...

CVE-2024-10448

CVE-2024-10448 affects Code-Projects Blood Bank Management System 1.0. The vulnerability is a cross-site request forgery in an unknown subset of the application, specifically involving the /file/delete.php endpoint and the bid parameter. The issue can be triggered remotely and has been publicly d...

CVE-2024-10418

The CVE-2024-10418 entry affects code-projects Blood Bank Management System 1.0. Concrete details from connected documents confirm a vulnerability in the /file/infoAdd.php file where manipulating the bg parameter triggers an SQL injection. The issue can be exploited remotely and has been publicly...

PT-2024-16259

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A critical issue has been identified, affecting the file /file/accept.php. The manipulation of the reqid argument leads to SQL injection. This issue can be exploited remotely...

CVE-2024-10417: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /file/delete.php. The manipulation of the argument bid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-10415: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...