CVE-2025-2389: code-projects Blood Bank Management System add_city.php sql injection
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addcity.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2389?
CVE-2025-2389 is rated as critical due to its potential for SQL injection vulnerability.
What functionality is affected by CVE-2025-2389?
CVE-2025-2389 affects the unknown functionality within the file /admin/add_city.php.
How does CVE-2025-2389 allow an attacker to exploit the system?
CVE-2025-2389 allows an attacker to perform SQL injection, which can be executed remotely.
What are the potential impacts of exploiting CVE-2025-2389?
Exploiting CVE-2025-2389 could lead to unauthorized data access or manipulation within the Blood Bank Management System.
How can I mitigate the risks associated with CVE-2025-2389?
To mitigate risks associated with CVE-2025-2389, ensure that user inputs are properly sanitized and validated before being processed by SQL queries.