CVE-2026-2060: code-projects Simple Blood Donor Management System editcampaignform.php sql injection
A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /simpleblooddonor/editcampaignform.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2060?
CVE-2026-2060 is classified as a critical vulnerability due to its potential to allow SQL injection attacks.
How do I fix CVE-2026-2060?
To fix CVE-2026-2060, validate and sanitize all user inputs in the editcampaignform.php file to prevent SQL injection.
What systems are affected by CVE-2026-2060?
CVE-2026-2060 affects version 1.0 of the Simple Blood Donor Management System by Code-projects.
What types of attacks can CVE-2026-2060 be used for?
CVE-2026-2060 can be exploited to perform SQL injection attacks, potentially allowing data exfiltration or manipulation.
Is there a patch available for CVE-2026-2060?
As of now, there is no official patch released for CVE-2026-2060, so it is critical to implement mitigation strategies immediately.