Approved changes feed: RSS · Atom

cpe:2.3:a:varunsardana004:blood_bank_and_donation_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVarunsardana004 (9118f23c-98ef-53a5-a4da-ec2846333c6f)
ProductBlood Bank And Donation Management System (91e75221-5f52-5502-bdd8-e66c2348b5b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/varunsardana004/blood-bank-and-donation-management-system purl2cpe 2026-06-01 10:11:29.263272

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11481 vulnerable 2026-06-08 07:04:28.224912 varunsardana004 Blood-Bank-And-Donation-Management-System donate_blood.php sql injection
MEDIUM (6.3)
A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donate_blood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.
Published: 2025-10-08T16:32:05.578Z
Updated: 2025-10-08T17:24:47.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45985 vulnerable 2026-06-08 06:48:09.894403 Details available
A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allows an attacker to inject malicious scripts via the name parameter of the update_contact.php
Published: 2024-09-26T00:00:00.000Z
Updated: 2024-09-26T17:55:04.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45984 vulnerable 2026-06-08 06:48:09.893173 Details available
A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an attacker to inject malicious scripts that will be executed when the Donor List is viewed.
Published: 2024-09-26T00:00:00.000Z
Updated: 2024-09-26T18:48:31.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42560 vulnerable 2026-06-08 06:45:46.720110 Details available
A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Details parameter.
Published: 2024-08-20T00:00:00.000Z
Updated: 2024-08-20T16:02:02.917Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.