Blood Bank (Code-projects) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-11-14. Vendor: Code-projects.
CVEs of Blood Bank
- CVE-2023-46022 - CVSS 7.8 (high), 2023-11-14: SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter.
- CVE-2023-46021 - CVSS 5.5 (medium), 2023-11-13: SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter.
- CVE-2023-46020 - CVSS 6.1 (medium), 2023-11-13: Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone'…
- CVE-2023-46019 - CVSS 6.1 (medium), 2023-11-13: Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter.
- CVE-2023-46015 - CVSS 6.1 (medium), 2023-11-13: Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in…
- CVE-2023-46018 - CVSS 5.5 (medium), 2023-11-13: SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter.
- CVE-2023-46014 - CVSS 5.5 (medium), 2023-11-13: SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword'…
- CVE-2023-46017 - CVSS 5.5 (medium), 2023-11-13: SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword'…
- CVE-2023-46016 - CVSS 6.1 (medium), 2023-11-13: Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL.
