CVE-2024-5516: falha de média gravidade em itsourcecode Online Blood Bank Management System
itsourcecode Online Blood Bank Management System massage.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.7%
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file massage.php. The manipulation of the argument bid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266587.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
itsourcecode · Online Blood Bank Management SystemCVEs relacionadas — itsourcecode Online Blood Bank Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-5517MEDIUMitsourcecode Online Blood Bank Management System changepwd.php sql injectionEPSS 0.9%CVE-2024-7320MEDIUMitsourcecode Online Blood Bank Management System Admin Login index.php sql injectionEPSS 0.7%CVE-2024-6966MEDIUMitsourcecode Online Blood Bank Management System Login login.php sql injectionEPSS 0.7%CVE-2024-7946MEDIUMitsourcecode Online Blood Bank Management System User Signup register.php sql injectionEPSS 0.7%CVE-2025-3195MEDIUMitsourcecode Online Blood Bank Management System bbms.php sql injectionEPSS 0.6%CVE-2024-7321MEDIUMitsourcecode Online Blood Bank Management System User Registration signup.php cross site scriptingEPSS 0.6%