Lucene search
+L

27 matches found

Kitploit
Kitploit
•added 2026/10/19 6:42 a.m.•16 views

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview Code-Projects...

5.5CVSS6.1AI score0.00355EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/10/19 3:56 a.m.•16 views

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview Code-Projects...

5.5CVSS6.1AI score0.00355EPSS
SaveExploits5
RedhatCVE
RedhatCVE
•added 2025/12/02 12:19 a.m.•27 views

CVE-2025-63531

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the remail and rpassword fields, a...

10CVSS8.4AI score0.00648EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/01 4:15 p.m.•20 views

CVE-2025-63533

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript...

5.4CVSS5.7AI score0.00218EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/12/01 3:15 p.m.•17 views

CVE-2025-63531

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the remail and rpassword fields, a...

9.8CVSS5.9AI score0.00648EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•10 views

CVE-2025-63533: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript...

8.5CVSS5.7AI score0.00218EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/01 12:00 a.m.•45 views

CVE-2025-63531

Blood Bank Management System 1.0 is affected in the receiverLogin.php component by a SQL injection flaw due to improper sanitization of input in SQL queries. An attacker can manipulate remail and rpassword to bypass authentication and gain unauthorized access. Public reports (Red Hat CVE, NVD, et...

10CVSS6.1AI score0.00648EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/01 12:00 a.m.•22 views

PT-2025-48460

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0 Description A SQL injection issue exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application does not properly sanitize user-supplied input used in SQL querie...

10CVSS7.9AI score0.00648EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/12/01 12:00 a.m.•25 views

EUVD-2025-199995

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the remail and rpassword fields, a...

10CVSS7.8AI score0.00648EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/12/01 12:00 a.m.•17 views

EUVD-2025-199993

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript...

8.5CVSS5.4AI score0.00218EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•10 views

CVE-2025-63531: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the remail and rpassword fields, a...

10CVSS6.1AI score0.00648EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-50280

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00355EPSS
SaveExploits5References1
osv_cve
osv_cve
•added 2023/11/13 11:15 p.m.•20 views

CVE-2023-46020

Cross Site Scripting XSS in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters...

6.1CVSS6AI score0.00479EPSS
SaveExploits4References1
NVD
NVD
•added 2023/11/13 10:15 p.m.•44 views

CVE-2023-46018

SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter...

5.5CVSS0.00355EPSS
SaveExploits5References1
attackerkb
attackerkb
•added 2023/11/13 10:15 p.m.•26 views

CVE-2023-46017

SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters...

5.5CVSS6.1AI score0.00355EPSS
SaveExploits5References2
attackerkb
attackerkb
•added 2023/11/13 10:15 p.m.•20 views

CVE-2023-46018

SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter...

5.5CVSS6AI score0.00355EPSS
SaveExploits5References2
osv_cve
osv_cve
•added 2023/11/13 10:15 p.m.•24 views

CVE-2023-46017

SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters...

5.5CVSS6AI score0.00355EPSS
SaveExploits5References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/13 12:00 a.m.•7 views

CVE-2023-46017: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters...

5.5CVSS6.1AI score0.00355EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2023/11/13 12:00 a.m.•17 views

PT-2023-29799 · Unknown · Code-Projects Blood Bank

Name of the Vulnerable Software and Affected Versions: Code-Projects Blood Bank version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands via the remail parameter in the receiverReg.php file. This can potentially lead to unauthorized access and manipulation of sensitiv...

5.5CVSS6.2AI score0.00355EPSS
SaveExploits5References3
CNNVD
CNNVD
•added 2023/11/13 12:00 a.m.•24 views

Code-Projects Blood Bank Security Breach

Code-Projects Blood Bank is a blood bank system from the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0, which stems from a SQL injection vulnerability in the parameters remail and rpassword in the file receiverLogin.php...

5.5CVSS7.9AI score0.00355EPSS
SaveExploits5References2
Rows per page
Query Builder