CVE-2024-13024

CVE-2024-13024 affects Codezips Blood Bank Management System 1.0. The vulnerability is in the processing of the file /campaign.php, where manipulation of the cname parameter leads to an SQL injection. Attacks can be remote, and multiple sources indicate the vulnerability is exploitable without us...

CVE-2025-0232

CVE-2025-0232 affects Codezips Blood Bank Management System 1.0, with SQL injection in the /successadmin.php file via the psw parameter. The vulnerability is exploitable remotely (network vector) and arises from unsafely handled input in a critical functionality, enabling compromised confidential...