CVE-2024-10448

code-projects Blood Bank Management System delete.php cross-site request forgery

View on CVE.org
Published Oct 28, 2024 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-33126 A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well.
History
Type Values Removed Values Added
First Time appeared Fabian
Fabian blood Bank Management System
CPEs cpe:2.3:a:fabianros:blood_bank_management_system:1.0:*:*:*:*:*:*:* cpe:2.3:a:fabian:blood_bank_management_system:1.0:*:*:*:*:*:*:*
Vendors & Products Fabianros
Fabianros blood Bank Management System
Fabian
Fabian blood Bank Management System
Type Values Removed Values Added
Metrics epss

{'score': 0.00037}

 epss

{'score': 0.00046}
Type Values Removed Values Added
First Time appeared Fabianros
Fabianros blood Bank Management System
CPEs cpe:2.3:a:fabianros:blood_bank_management_system:1.0:*:*:*:*:*:*:*
Vendors & Products Fabianros
Fabianros blood Bank Management System
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well.
Title code-projects Blood Bank Management System delete.php cross-site request forgery
Weaknesses CWE-352
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:P/A:N'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Oct 28, 2024, 1:45 PM
Reserved
Oct 28, 2024, 6:17 AM

View source JSON

Updated
Oct 28, 2024, 1:45 PM

JSON

Status
Analyzed
Published
Oct 28, 2024, 2:15 PM
Modified
Jun 17, 2026, 6:55 AM

View source JSON

No data.

No data.