CVE-2025-1577

CVE-2025-1577 affects Code-Projects Blood Bank System 1.0. The vulnerability is a cross-site scripting (XSS) in the unknown functionality handled by /prostatus.php, triggered by manipulating the message parameter. This may be exploitable remotely. Public exploitation details are provided across m...

CVE-2025-2049

CVE-2025-2049 affects the Code-Projects Blood Bank System 1.0. The vulnerability is in an unknown function of the file AB+.php where manipulation of the parameter Bloodname leads to cross-site scripting (XSS) . The description states the attack can be launched remotely and the exploit has been di...

CVE-2024-12000

CVE-2024-12000 affects code-projects Blood Bank System 1.0 in the Setting Handler component. The vulnerability is a cross-site scripting (XSS) issue triggered by manipulating the firstname parameter in the /controllers/updatesettings.php file. The attack can be initiated remotely and exploits hav...

CVE-2025-1957

The CVE-2025-1957 entry concerns code-projects Blood Bank System 1.0. Affected component: unknown code in /BBfile/Blood/o+.php, where manipulation of the Bloodname parameter enables cross-site scripting. Impact is described as low to moderate depending on data, with remote initiation and user int...

CVE-2024-9805

CVE-2024-9805 affects code-projects Blood Bank System 1.0, specifically the web endpoint /admin/campsdetails.php. The vulnerability arises from manipulating the parameter hospital/address/city/contact, which enables cross-site scripting. The issue may be exploited remotely and, per multiple sourc...

CVE-2024-9804

CVE-2024-9804 affects code-projects Blood Bank System 1.0. A SQL injection vulnerability exists in the /admin/campsdetails.php page, via the hospital parameter. The issue can be exploited remotely and has publicly disclosed exploits. Multiple sources consistently identify the vulnerable component...

CVE-2024-10142

The CVE-2024-10142 entries describe a cross-site scripting flaw in code-projects Blood Bank System 1.0, specifically in /viewrequest.php. Affected component: /viewrequest.php in Blood Bank System 1.0; root cause not explicitly detailed in the documents. Impact: potential remote exploitation with ...

CVE-2024-9084

The CVE-2024-9084 entry concerns a cross-site scripting (XSS) vulnerability in code-projects Blood Bank System 1.0, affecting the bbms.php file. The issue arises from manipulating the arguments fullname, age, bloodgroup, city, phno, and gender as part of a string, enabling remote exploitation and...

CVE-2024-9803

The CVE-2024-9803 entry concerns code-projects Blood Bank Management System 1.0. A cross-site scripting vulnerability is present in an unknown part of blooddetails.php, triggered by manipulating the Availibility parameter. The issue is exploitable remotely and the vulnerability has been disclosed...

CVE-2024-10171

CVE-2024-10171 affects code-projects Blood Bank System up to version 1.0. Affected is an unknown function in /admin/massage.php where manipulation of the bid parameter enables SQL injection. Attacks are described as remote and exploitable with the exploit disclosed publicly. Connected sources (NV...