CVE-2025-63535

Katalog CVE

CVSS 8.8 · High EPSS 0,39%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada shridharshukl blood bank management system. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system.

Rincian

Terbit di NVD

1 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63535.md advisory pihak ketiga
• https://drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/view?usp=sharing broken link
• https://github.com/Shridharshukl/Blood-Bank-Management-System product