CVE-2025-2033: code-projects Blood Bank Management System view_donor.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /userdashboard/viewdonor.php. The manipulation of the argument donorid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2033?
CVE-2025-2033 is classified as a critical vulnerability.
How does CVE-2025-2033 affect the Blood Bank Management System?
CVE-2025-2033 allows SQL injection through manipulation of the donor_id argument in the file /user_dashboard/view_donor.php.
How do I fix CVE-2025-2033?
To fix CVE-2025-2033, validate and sanitize all inputs, particularly the donor_id parameter, to prevent SQL injection.
What systems are impacted by CVE-2025-2033?
CVE-2025-2033 impacts the Blood Bank Management System version 1.0.
What can attackers do with CVE-2025-2033?
Attackers can exploit CVE-2025-2033 to execute arbitrary SQL queries, which may lead to unauthorized access to sensitive data.