← Back

Blood Bank

blood_bank

Vendor: Code Projects • 9 CVEs

CVEs (9)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-46022
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter.
CVE-2023-46021
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter.
CVE-2023-46020
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters.
CVE-2023-46019
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter.
CVE-2023-46018
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter.
CVE-2023-46017
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters.
CVE-2023-46016
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL.
CVE-2023-46015
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL.
CVE-2023-46014
1Code Projects
1Blood Bank
Jun 17, 2026
Nov 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters.