diveshlunker/BloodX

diveshlunker/BloodX

GitHubGitHub
GitHubgithub.com
Releases0
Stars11
A website with php as a backend to manage blood bank and many other functionalities.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-37156↗
6.5 MEDIUM—

BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access.

CVE-2020-29282↗
9.8 CRITICAL7.5 HIGH

SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication.