PT-2025-11548 · Unknown · Code-Projects Blood Bank Management System

Intrcpt

·

Published

2025-03-17

·

Updated

2025-05-28

·

CVE-2025-2391

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0
Description A critical vulnerability was found in the code-projects Blood Bank Management System. This issue affects unknown code of the file /admin/admin login.php of the component Admin Login Page, leading to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed to the public. The vulnerability is classified as critical and can be exploited to inject SQL code.
Recommendations For code-projects Blood Bank Management System version 1.0, consider disabling the /admin/admin login.php file or restricting access to the Admin Login Page until a patch is available. As a temporary workaround, avoid using the admin login.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-2391

Affected Products

Code-Projects Blood Bank Management System