Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-90841 1 Phpgurukul 1 Blood Donor Management System 2026-09-14 7.3 High
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-90840 1 Phpgurukul 1 Blood Donor Management System 2026-09-14 7.3 High
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.
CVE-2022-40470 1 Phpgurukul 1 Blood Donor Management System 2025-04-29 4.8 Medium
Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature.