GCVE - cpe:2.3:a:shridharshukl:blood_bank_management

Approved changes feed: RSS · Atom

cpe:2.3:a:shridharshukl:blood_bank_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Shridharshukl (`4a085ea1-df09-5861-ae9c-4625a02598bf`)
Product	Blood Bank Management System (`3777ca42-8bdc-5721-8f35-0852cc7678bf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/sumitkumar1503/bloodbankmanagement`	purl2cpe	2026-06-01 10:14:59.087738

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-63535`	vulnerable	2026-06-08 07:39:17.651453	Details available CRITICAL (9.6) A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system. Published: 2025-12-01T00:00:00.000Z Updated: 2025-12-01T16:53:39.925Z Open on db.gcve.eu Reference links https://github.com/Shridharshukl/Blood-Bank-Management-System https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63535.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63534`	vulnerable	2026-06-08 07:39:17.651084	Details available HIGH (8.5) A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the login.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg and error parameters, which are then executed in the victim's browser when the page is viewed. Published: 2025-12-01T00:00:00.000Z Updated: 2025-12-01T17:03:41.149Z Open on db.gcve.eu Reference links https://github.com/Shridharshukl/Blood-Bank-Management-System https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63534.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63533`	vulnerable	2026-06-08 07:39:17.650839	Details available HIGH (8.5) A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the rname, remail, rpassword, rphone, rcity parameters, which are then executed in the victim's browser when the page is viewed. Published: 2025-12-01T00:00:00.000Z Updated: 2025-12-01T18:21:23.839Z Open on db.gcve.eu Reference links https://github.com/Shridharshukl/Blood-Bank-Management-System https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63533.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63532`	vulnerable	2026-06-08 07:39:17.650458	Details available CRITICAL (9.6) A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system. Published: 2025-12-01T00:00:00.000Z Updated: 2025-12-01T18:26:47.781Z Open on db.gcve.eu Reference links https://github.com/Shridharshukl/Blood-Bank-Management-System https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63532.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63531`	vulnerable	2026-06-08 07:39:17.649979	Details available CRITICAL (10) A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the remail and rpassword fields, an attacker can bypass authentication and gain unauthorized access to the system. Published: 2025-12-01T00:00:00.000Z Updated: 2025-12-01T18:30:42.119Z Open on db.gcve.eu Reference links https://github.com/Shridharshukl/Blood-Bank-Management-System https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63531.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63529`	vulnerable	2026-06-08 07:39:17.645686	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63528`	vulnerable	2026-06-08 07:39:17.645424	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63527`	vulnerable	2026-06-08 07:39:17.645009	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63526`	vulnerable	2026-06-08 07:39:17.644512	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-63525`	vulnerable	2026-06-08 07:39:17.644105	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Blood Bank Management System

Notes

PURL mappings

Vulnerability references

Contribute