Code-Projects Blood Bank
9 CVEs affecting Code-Projects Blood Bank. Latest disclosed: 2023-11-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46022 | High | 7.8 | 2023-11-14 | SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter. |
CVE-2023-46020 | Medium | 6.1 | 2023-11-13 | Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and… |
CVE-2023-46019 | Medium | 6.1 | 2023-11-13 | Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter. |
CVE-2023-46016 | Medium | 6.1 | 2023-11-13 | Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL. |
CVE-2023-46015 | Medium | 6.1 | 2023-11-13 | Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application… |
CVE-2023-46021 | Medium | 5.5 | 2023-11-13 | SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter. |
CVE-2023-46018 | Medium | 5.5 | 2023-11-13 | SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter. |
CVE-2023-46017 | Medium | 5.5 | 2023-11-13 | SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' pa… |
CVE-2023-46014 | Medium | 5.5 | 2023-11-13 | SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' pa… |