Beveiligingsadvies

CVE-2025-63532

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-01 00:00:00

Laatst bijgewerkt 2025-12-01 18:26:47

Toegewezen door mitre

CVSS-score 9.6

Status PUBLISHED

Beschrijving

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system.

← Alle CVE's bekijken Bekijk op cve.org ↗