Code-Projects Blood Bank vulnerabilities

9 CVEs affecting Code-Projects Blood Bank, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46022, published 2023-11-14.

More from Code-Projects.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-46022, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter.
• CVE-2023-46020, published 2023-11-13. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters.
• CVE-2023-46019, published 2023-11-13. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter.
• CVE-2023-46016, published 2023-11-13. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL.
• CVE-2023-46015, published 2023-11-13. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL.
• CVE-2023-46014, published 2023-11-13. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters.
• CVE-2023-46018, published 2023-11-13. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter.
• CVE-2023-46017, published 2023-11-13. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters.
• CVE-2023-46021, published 2023-11-13. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter.