PT-2025-48460 · Unknown · Blood Bank Management System

Published 2025-12-01 · Updated 2025-12-26 · CVE-2025-63531

Positive Technologies · (AI Summary)

CVSS v3.1

10

10

Critical

Base vector

AC:L/AV:N/A:N/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0

Description A SQL injection issue exists in the Blood Bank Management System 1.0 within the

receiverLogin.php

component. The application does not properly sanitize user-supplied input used in SQL queries. An attacker can inject arbitrary SQL code by manipulating the

remail

and

rpassword

fields. This allows bypassing authentication and gaining unauthorized access to the system.

Recommendations Apply proper input sanitization to all user-supplied data used in SQL queries within the

receiverLogin.php

component.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63531

Affected Products

Blood Bank Management System

References · 8

• 🔥 https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing · Exploit
• 🔥 https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63531.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63531 · Security Note
• https://github.com/Shridharshukl/Blood-Bank-Management-System · Note
• https://twitter.com/0dayPublishing/status/1995567366889996351 · Twitter Post
• https://twitter.com/CveFindCom/status/1995548565934948538 · Twitter Post
• https://twitter.com/SecReportCVE/status/2004676590521741733 · Twitter Post
• https://twitter.com/CVEnew/status/1995519595734569041 · Twitter Post