Code-Projects Blood Bank System 1.0 SQL Injection Vulnerability (CVE-2024-10506)

Key Information 1. Vulnerability Name: - Code-Projects Blood Bank System 1.0 B-PHP Bloodname SQL Injection 2. CVE ID: - CVE-2024-10506 3. CVSS Meta Temp Score: - 6.0 4. Current Exploit Price: - $0-$5k 5. CTI Interest Score: - 0.58 6. Vulnerability Description: - An unknown code in Code-Projects Blood Bank System 1.0, located in the file /admin/blood/update/B-php, contains an SQL injection vulnerability. External-influenced input can be used to construct or partially construct SQL commands, which are not properly neutralized or neutralized for special elements. These elements may alter SQL commands when sent to downstream components, impacting confidentiality, integrity, and availability. 7. Affected Scope: - Code-Projects Blood Bank System 1.0 8. Exploitation Method: - Remote Exploitation 9. Public Disclosure: - Publicly Disclosed 10. Public Exploit: - Possibly Exploitable 11. Technical Details and Public Exploit: - Known 12. Attack Technique: - T1505 (According to MITRE ATT&CK) 13. Exploit Tool: - GitHub.com 14. Exploitation Method: - Proof of Concept 15. Search Method: - Use Google Hacking search: inurl:admin/blood/update/B-php 16. Recommended Mitigation: - Replace affected components Related Links GitHub.com: Provides links to exploit tools and proof-of-concept. VulDB: Offers detailed vulnerability information and scoring. Additional Information Copyright: VulDB.com, 1997-2024, CC BY-NC-SA Language Support: de, fr, it, es, pt, ru, pl, sv, zh, ja, ar Version: v18.9.3

Goal Reached Thanks to every supporter — we hit 100%!

Code-Projects Blood Bank System 1.0 SQL Injection Vulnerability (CVE-2024-10506)