PT-2025-48459 · Unknown · Blood Bank Management System

Published 2025-12-01 · Updated 2025-12-01 · CVE-2025-63529

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0

Description A session fixation issue exists in the Blood Bank Management System. An attacker can set or predict a user's session identifier before authentication. Specifically, the vulnerability is present in the login.php file. When a victim logs in, the application uses the attacker-supplied session ID instead of creating a new one, allowing the attacker to hijack the authenticated session and gain unauthorized access to the victim's account.

Recommendations Versions prior to 1.0 should be updated.

Exploit

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2025-63529

Affected Products

Blood Bank Management System

References · 7

• 🔥 https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63529.md · Exploit
• 🔥 https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2025-63529 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63529 · Security Note
• https://github.com/Shridharshukl/Blood-Bank-Management-System · Note
• https://twitter.com/CVEnew/status/1995519594816020940 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1995530277876097060 · Twitter Post