Vendors / Shridharshukl Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 6
Exploited now Shridharshukl records in CISA KEV No Shridharshukl vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00689 · Published 2025-12-01 · No fix listed CWE-89
Priority HIGH 76
An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges via crafted request to delete.php.
CVSS 3.1 CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.0053 · Published 2025-12-01 · No fix listed CWE-284
Priority HIGH 74
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component.
CVSS 3.1 CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00413 · Published 2025-12-01 · No fix listed CWE-89
Priority HIGH 74
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component.
CVSS 3.1 CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00413 · Published 2025-12-01 · No fix listed CWE-89
Priority HIGH 71
A session fixation vulnerability exists in Blood Bank Management System 1.0 in login.php that allows an attacker to set or predict a user's session identifier prior to authentication.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00395 · Published 2025-12-01 · No fix listed CWE-384
Priority HIGH 70
A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the login.php component.
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00234 · Published 2025-12-01 · No fix listed CWE-79
Priority HIGH 70
A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components.
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00234 · Published 2025-12-01 · No fix listed CWE-79
Priority HIGH 70
A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and hprofile.php components.
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00352 · Published 2025-12-01 · No fix listed CWE-79
Priority LOW 37
A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the blooddinfo.php component.
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00352 · Published 2025-12-01 · No fix listed CWE-79
Priority LOW 37
A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System within the abs.php component.
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00352 · Published 2025-12-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 6 0 0 0
THREATIST.IORead the docs