CVE-2025-2044 - CERT CVE
ID CVE-2025-2044
Sažetak A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_bloodGroup.php. The manipulation of the argument blood_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Reference
CVSS
Base: 5.8
Impact: 6.4
Exploitability:6.4
Pristup
VektorSloženostAutentikacija
NETWORK LOW MULTIPLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:N/AC:L/Au:M/C:P/I:P/A:P
Zadnje važnije ažuriranje 13-05-2025 - 20:57
Objavljeno 06-03-2025 - 22:15