Vulnerability · Published Jul 31, 2024 · Assigned by VulDB
CVE-2024-7320itsourcecode Online Blood Bank Management System Admin Login index.php sql injection
High 7.3
In plain English
A high-severity SQL injection in Online Blood Bank Management System from itsourcecode. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Official description
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273231.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| itsourcecode | Online Blood Bank Management System | 1.0 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- VDB-273231 | itsourcecode Online Blood Bank Management System Admin Login index.php sql injection vdb-entry, technical-description
- VDB-273231 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #383397 | itsourcecode Online Blood Bank Management System 1 Authentication Bypass via SQL Injection third-party-advisory
- https://github.com/cl4irv0yance/CVEs/issues/3 exploit, issue-tracking