CVE-2023-3854

CRITICO 9.8CVE-2023-3854 · Published 23/07/2023 · updated 17/06/2026

In breve

CVE-2023-3854 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda bloodbank (phpscriptpoint).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 42.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
bloodbank phpscriptpoint	`= 1.1`	No fix yet

Description

A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/blood_group_id leads to sql injection. It is possible to launch the attack remotely. VDB-235206 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

vuldb.com · Permissions Required
vuldb.com · Permissions Required

Altre vulnerabilità di bloodbank

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free