PT-2025-48455 · Unknown · Blood Bank Management System

Published 2025-12-01 · Updated 2026-01-06 · CVE-2025-63525

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0

Description An issue exists in Blood Bank Management System version 1.0 that allows authenticated attackers to perform actions with escalated privileges. This is achieved by sending a crafted request to the ''delete.php'' endpoint. The issue allows authenticated users to execute administrative functions.

Recommendations Blood Bank Management System version 1.0: Address the crafted request handling in the ''delete.php'' endpoint to prevent privilege escalation.

Exploit

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-63525

Affected Products

Blood Bank Management System

References · 10

• 🔥 https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63525.md · Exploit
• 🔥 https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63525 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63525 · Vendor Advisory
• https://github.com/Shridharshukl/Blood-Bank-Management-System · Note
• https://twitter.com/0dayPublishing/status/1995582490237362671 · Twitter Post
• https://twitter.com/CVEnew/status/1995519591083053497 · Twitter Post
• https://twitter.com/CveFindCom/status/1995548649321894080 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1995532837928222819 · Twitter Post
• https://t.me/cveNotify/147905 · Telegram Post