CVE-2025-2039: code-projects Blood Bank Management System delete_members.php sql injection
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2039?
CVE-2025-2039 is classified as a critical vulnerability.
How does CVE-2025-2039 affect the Blood Bank Management System?
CVE-2025-2039 allows for SQL injection through the manipulation of the member_id argument in /admin/delete_members.php.
Can CVE-2025-2039 be exploited remotely?
Yes, CVE-2025-2039 can be exploited remotely by attackers.
What are the potential impacts of CVE-2025-2039?
Exploitation of CVE-2025-2039 may allow unauthorized access to sensitive data within the Blood Bank Management System.
How do I fix CVE-2025-2039?
To fix CVE-2025-2039, validate and sanitize user input for the member_id parameter to prevent SQL injection.