Code Projects Blood Bank System
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Code Projects Blood Bank System.
By the Year
In 2026 there have been 0 vulnerabilities in Code Projects Blood Bank System. Last year, in 2025 Blood Bank System had 6 security vulnerabilities published. Right now, Blood Bank System is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 6 | 5.12 |
| 2024 | 16 | 6.86 |
It may take a day or so for new Blood Bank System vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Code Projects Blood Bank System Security Vulnerabilities
Blood Bank System 1.0 AB+.php XSS via Bloodname arg
CVE-2025-2049
3.5 - Low
- March 06, 2025
A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manipulation of the argument Bloodname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
XSS
XSS via Bloodname in code-projects Blood Bank System 1.0 file o+.php
CVE-2025-1957
3.5 - Low
- March 04, 2025
A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /BBfile/Blood/o+.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
XSS
Blood Bank System 1.0 XSS via Availibility Arg in /Blood/A+.php
CVE-2025-1904
6.1 - Medium
- March 04, 2025
A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /Blood/A+.php. The manipulation of the argument Availibility leads to cross site scripting. The attack may be launched remotely.
XSS
CVE-2025-1586: XSS in code-projects Blood Bank System 1.0 via Bloodname
CVE-2025-1586
6.1 - Medium
- February 23, 2025
A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /Blood/A-.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
XSS
XSS in code-projects BBBS 1.0 /admin/user.php Email param
CVE-2025-1579
6.1 - Medium
- February 23, 2025
A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/user.php. The manipulation of the argument email leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
XSS
XSS in Blood Bank System 1.0 via prostatus.php (message arg)
CVE-2025-1577
5.4 - Medium
- February 23, 2025
A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /prostatus.php. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
XSS
Blood Bank System: Cross-Site Scripting in Setting Handler
CVE-2024-12000
5.4 - Medium
- November 30, 2024
A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
XSS
CRITICAL SQLi in code-projects Blood Bank System 1.0 /admin/blood/update/B-.php
CVE-2024-10506
7.2 - High
- October 30, 2024
A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
Blood Bank System <=1.0: SQL Injection via /admin/massage.php
CVE-2024-10171
4.9 - Medium
- October 20, 2024
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up to 1.0. Affected is an unknown function of the file /admin/massage.php. The manipulation of the argument bid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
Blood Bank System 1.0 XSS in /viewrequest.php
CVE-2024-10142
5.4 - Medium
- October 19, 2024
A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /viewrequest.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
XSS
SQLi in Blood Bank System 1.0 reset.php (useremail) remote
CVE-2024-9894
8.8 - High
- October 12, 2024
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
Critical SQL Injection in /update.php of Blood Bank System 1.0 (code-projects)
CVE-2024-9817
8.8 - High
- October 10, 2024
A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical. This affects an unknown part of the file /update.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
Critical SQLi in Blood Bank System 1.0 /admin/campsdetails.php
CVE-2024-9804
4.9 - Medium
- October 10, 2024
A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/campsdetails.php. The manipulation of the argument hospital leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
SQL Injection
BloodBankSys 1.0: XSS in admin/campsdetails.php via hospital param
CVE-2024-9805
5.4 - Medium
- October 10, 2024
A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/campsdetails.php. The manipulation of the argument hospital/address/city/contact leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "hospital".
XSS
Blood Bank Management System 1.0 XSS via Availibility in blooddetails.php
CVE-2024-9803
5.4 - Medium
- October 10, 2024
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file blooddetails.php. The manipulation of the argument Availibility leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
XSS
Blood Bank System 1.0 SQLi in register.php via user param (remote)
CVE-2024-9797
7.5 - High
- October 10, 2024
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file register.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
CVE-2024-9327: SQLi in Blood Bank System 1.0 /forgot.php Remote
CVE-2024-9327
9.8 - Critical
- September 29, 2024
A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot.php. The manipulation of the argument useremail leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
SQLi in code-projects Blood Bank System 1.0 via /admin/blood/update/B+.php
CVE-2024-9316
7.5 - High
- September 28, 2024
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
Code-Projects Blood Bank System 1.0 SQLi via /admin/blood/update/o-.php
CVE-2024-9094
9.8 - Critical
- September 23, 2024
A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /admin/blood/update/o-.php. The manipulation of the argument bloodname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
XSS in code-projects Blood Bank System 1.0 (bbms.php)
CVE-2024-9084
5.4 - Medium
- September 22, 2024
A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file bbms.php. The manipulation of the argument fullname/age/bloodgroup/city/phno/gender as part of String leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
XSS
XSS in code-projects Blood Bank System 1.0 Login Page via 'user' param
CVE-2024-8174
6.1 - Medium
- August 26, 2024
A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login.php of the component Login Page. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
XSS
Remote SQLi in code-projects Blood Bank System 1.0 Login Page
CVE-2024-8173
7.5 - High
- August 26, 2024
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file /login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
SQL Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Code Projects Blood Bank System or by Code Projects? Click the Watch button to subscribe.