PT-2025-48464 · Unknown · Blood Bank Management System

Published 2025-12-01 · Updated 2025-12-04 · CVE-2025-63535

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0

Description The application does not properly sanitize user-supplied input within SQL queries, leading to a SQL injection issue in the abs.php component. An attacker can manipulate the search field to bypass authentication and gain unauthorized access to the system by injecting arbitrary SQL code.

Recommendations Blood Bank Management System version 1.0: Ensure all user-supplied input is properly sanitized before being used in SQL queries. Specifically, address the input handling within the abs.php component and the search field to prevent SQL injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63535

Affected Products

Blood Bank Management System

References · 12

• 🔥 https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63535.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-63535 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63535 · Security Note
• https://github.com/Shridharshukl/Blood-Bank-Management-System · Note
• https://twitter.com/dailycve/status/1996389416252875175 · Twitter Post
• https://twitter.com/CVEnew/status/1995519599417123071 · Twitter Post
• https://t.me/cveNotify/144697 · Telegram Post
• https://twitter.com/CveFindCom/status/1995548461572280821 · Twitter Post
• https://t.me/CVEtracker/38555 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1995560996002210189 · Twitter Post
• https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing · Note
• https://twitter.com/0dayPublishing/status/1995540945887011155 · Twitter Post