Code-Projects Blood Bank System vulnerabilities

CVE-2025-2049 [MEDIUM] CWE-79 CVE-2025-2049: A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Aff A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manipulation of the argument Bloodname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-1957 [MEDIUM] CWE-79 CVE-2025-1957: A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vul A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /BBfile/Blood/o+.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-1904 [MEDIUM] CWE-79 CVE-2025-1904: A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Sys A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /Blood/A+.php. The manipulation of the argument Availibility leads to cross site scripting. The attack may be launched remotely.

CVE-2025-1579 [MEDIUM] CWE-79 CVE-2025-1579: A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/user.php. The manipulation of the argument email leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters

CVE-2025-1577 [MEDIUM] CWE-79 CVE-2025-1577: A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Sys A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /prostatus.php. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be

CVE-2025-1586 [MEDIUM] CWE-79 CVE-2025-1586: A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as problemati A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /Blood/A-.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-12000 [MEDIUM] CWE-79 CVE-2024-12000: A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. The attack may be initiated remotely. The exploit has been

CVE-2024-10506 [MEDIUM] CWE-89 CVE-2024-10506: A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This a A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-10171 [MEDIUM] CWE-89 CVE-2024-10171: A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up t A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up to 1.0. Affected is an unknown function of the file /admin/massage.php. The manipulation of the argument bid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-10142 [MEDIUM] CWE-79 CVE-2024-10142: A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /viewrequest.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9894 [MEDIUM] CWE-89 CVE-2024-9894: A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9805 [MEDIUM] CWE-79 CVE-2024-9805: A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/campsdetails.php. The manipulation of the argument hospital/address/city/contact leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi

CVE-2024-9817 [MEDIUM] CWE-89 CVE-2024-9817: A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical. This affects an unknown part of the file /update.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9797 [MEDIUM] CWE-89 CVE-2024-9797: A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file register.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9803 [MEDIUM] CWE-79 CVE-2024-9803: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file blooddetails.php. The manipulation of the argument Availibility leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be

CVE-2024-9804 [MEDIUM] CWE-89 CVE-2024-9804: A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/campsdetails.php. The manipulation of the argument hospital leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parame

CVE-2024-9327 [MEDIUM] CWE-89 CVE-2024-9327: A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot.php. The manipulation of the argument useremail leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9316 [MEDIUM] CWE-89 CVE-2024-9316: A vulnerability classified as critical has been found in code-projects Blood Bank Management System A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9094 [MEDIUM] CWE-89 CVE-2024-9094: A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulner A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /admin/blood/update/o-.php. The manipulation of the argument bloodname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9084 [MEDIUM] CWE-79 CVE-2024-9084: A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vul A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file bbms.php. The manipulation of the argument fullname/age/bloodgroup/city/phno/gender as part of String leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the p