CVE-2023-46014

SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.39% chance of exploitation in the next 30 days, 33th percentile

Published

2023-11-13

Updated

2024-09-03

Proof-of-concept exploits (2)

• ersinerenler/CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability0★ · 2023-11-14
• esasadam06/Simple-CRUD-Functionality-SQLi-POC1★ · 2024-08-12

References

• CVE Record
• NVD entry

Related

• CVE-2023-46015
• CVE-2023-46016
• CVE-2023-46017
• CVE-2023-46018
• CVE-2023-46019
• CVE-2023-46020