Phpgurukul Blood Bank & Donor Management System vulnerabilities

7 CVEs affecting Phpgurukul Blood Bank & Donor Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-50487, published 2025-07-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-12955, published 2024-12-26. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of the file /logout.php. The manipulation…
CVE-2024-0459, published 2024-01-12. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The…
CVE-2025-4176, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as critical. This vulnerability affects unknown code of the file…
CVE-2024-0476, published 2024-01-13. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, was found in Blood Bank & Donor Management 1.0. This affects an unknown part of the file request-received-bydonar.php. The manipulation leads to…
CVE-2023-41575, published 2023-09-08. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload…
CVE-2024-12982, published 2024-12-27. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file…
CVE-2025-50487, published 2025-07-28. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack.