CVE-2025-0232: Codezips Blood Bank Management System successadmin.php sql injection
A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /successadmin.php. The manipulation of the argument psw leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0232?
CVE-2025-0232 is classified as a critical vulnerability.
How does CVE-2025-0232 affect the Codezips Blood Bank Management System?
CVE-2025-0232 allows for SQL injection through the manipulation of the 'psw' argument in the file /successadmin.php.
Can CVE-2025-0232 be exploited remotely?
Yes, the attack exploiting CVE-2025-0232 can be launched remotely.
What version of Codezips Blood Bank Management System is affected by CVE-2025-0232?
CVE-2025-0232 affects version 1.0 of the Codezips Blood Bank Management System.
How can I mitigate the risks associated with CVE-2025-0232?
To mitigate the risks of CVE-2025-0232, it is recommended to sanitize user inputs and apply security patches.