CVE-2025-14960: code-projects Simple Blood Donor Management System editeddonor.php sql injection
A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14960?
The severity of CVE-2025-14960 is categorized as high due to the potential for SQL injection exploitation.
How do I fix CVE-2025-14960?
To fix CVE-2025-14960, sanitize and validate user inputs within the affected function to prevent SQL injection.
What systems are affected by CVE-2025-14960?
CVE-2025-14960 affects the Simple Blood Donor Management System version 1.0 developed by code-projects.
Can CVE-2025-14960 be exploited remotely?
Yes, CVE-2025-14960 can be exploited remotely due to the vulnerabilities associated with the editeddonor.php file.
What are the potential impacts of CVE-2025-14960?
The potential impacts of CVE-2025-14960 include unauthorized access to the database and manipulation of sensitive data.