Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:bloodbank_managing_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductBloodbank Managing System (f5a187b6-cb84-51fd-8420-4f00aaa29843)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7732 vulnerable 2026-06-08 08:08:57.625441 code-projects BloodBank Managing System request_blood.php unrestricted upload
MEDIUM (6.3)
A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file request_blood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used.
Published: 2026-05-04T04:30:13.786Z
Updated: 2026-05-05T19:07:33.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7731 vulnerable 2026-06-08 08:08:57.625066 code-projects BloodBank Managing System get_state.php sql injection
MEDIUM (6.3)
A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file get_state.php. The manipulation of the argument G_STATE_ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Published: 2026-05-04T04:15:10.528Z
Updated: 2026-05-05T00:56:03.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5240 vulnerable 2026-06-08 08:07:03.439394 code-projects BloodBank Managing System admin_state.php cross site scripting
MEDIUM (4.3)
A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /admin_state.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-03-31T23:45:13.436Z
Updated: 2026-04-01T19:03:08.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.