PT-2025-48461 · Unknown · Blood Bank Management System

Published 2025-12-01 · Updated 2025-12-01 · CVE-2025-63532

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0

Description The application does not properly sanitize user-supplied input within SQL queries, leading to a SQL injection issue. An attacker can manipulate the search field to inject arbitrary SQL code, potentially bypassing authentication and gaining unauthorized access to the system. The vulnerability exists within the cancel.php component. The search field is the entry point for the attack.

Recommendations Apply proper input validation and sanitization techniques to all user-supplied data used in SQL queries. Specifically, address the vulnerability in the cancel.php component and the search field.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63532

Affected Products

Blood Bank Management System

References · 10

• 🔥 https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63532.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-63532 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63532 · Security Note
• https://github.com/Shridharshukl/Blood-Bank-Management-System · Note
• https://twitter.com/CveFindCom/status/1995548538919395483 · Twitter Post
• https://twitter.com/0dayPublishing/status/1995563592544932219 · Twitter Post
• https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing · Note
• https://t.me/CVEtracker/38552 · Telegram Post
• https://twitter.com/CVEnew/status/1995519596640551235 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1995571235787247882 · Twitter Post