CVE-2025-63532 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to properly sanitize user-su…
Critical CVSS: 9.6

CVE-2025-63532

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system.
Vendor
Shridharshukl
Product
Blood Bank Management System
CWE
CWE-89
Yayın Tarihi
2025-12-01 16:15:55
Güncelleme
2025-12-04 18:08:16
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-89 Blood Bank Management System CRITICAL Shridharshukl 2025

Referanslar

https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing https://github.com/Shridharshukl/Blood-Bank-Management-System https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63532.md