CVE-2024-10418: code-projects Blood Bank Management System infoAdd.php sql injection

Published Oct 27, 2024

Updated

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /file/infoAdd.php. The manipulation of the argument bg leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Fabian Blood Bank Management System=1.0

Event History

Oct 27, 2024

CVE Published

via MITRE·01:31 PM

Data Sourced

via MITRE·01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-10418?

CVE-2024-10418 has been declared as critical due to its potential for SQL injection.

How do I fix CVE-2024-10418?

To fix CVE-2024-10418, you should sanitize inputs and parameterize SQL queries in the /file/infoAdd.php file.

What systems are affected by CVE-2024-10418?

CVE-2024-10418 affects version 1.0 of the Fabianros Blood Bank Management System.

What type of vulnerability is CVE-2024-10418?

CVE-2024-10418 is a SQL injection vulnerability affecting the Blood Bank Management System.

Can CVE-2024-10418 be exploited remotely?

Yes, CVE-2024-10418 can be exploited remotely due to improper validation of user input.