CVE-2024-10506: medium-severity vulnerability in code-projects Blood Bank System
code-projects Blood Bank System B-.php sql injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.6%
A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
code-projects · Blood Bank SystemRelated CVEs — code-projects Blood Bank System
In the same product, most dangerous first.
CVE-2024-8173MEDIUMcode-projects Blood Bank System Login Page login.php sql injectionEPSS 0.7%CVE-2024-9797MEDIUMcode-projects Blood Bank System register.php sql injectionEPSS 0.6%CVE-2024-9094MEDIUMcode-projects Blood Bank System o-.php sql injectionEPSS 0.6%CVE-2024-8174MEDIUMcode-projects Blood Bank System Login Page login.php cross site scriptingEPSS 0.6%CVE-2024-9327MEDIUMcode-projects Blood Bank System forgot.php sql injectionEPSS 0.5%CVE-2024-9894MEDIUMcode-projects Blood Bank System reset.php sql injectionEPSS 0.5%