9.6
/ 10
CRITICAL
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N
Description
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system.
AI Analysis
SQL injection vulnerability in Blood Bank Management System 1.0 allowing unauthorized access
Basic Information
ID
CVE-2025-63535
Source
mitre
Published
Dec 1, 2025 at 00:00
Modified
Dec 1, 2025 at 16:53
Affected Product
Vendor
Shridharshukl
Product
Blood Bank Management System
Version
1.0
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.6 / 10
AI Severity
Critical
Vendor
Shridharshukl
Product
Blood Bank Management System
Version
1.0