Critical severity9.6NVD Advisory· Published Dec 1, 2025· Updated Jun 17, 2026
CVE-2025-63535
CVE-2025-63535
Description
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass authentication and gain unauthorized access to the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:shridharshukl:blood_bank_management_system:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:shridharshukl:blood_bank_management_system:1.0:*:*:*:*:*:*:*
- (no CPE)range: <1.0
- Blood Bank Management System/Blood Bank Management Systemdescription
Patches
Vulnerability mechanics
References
2- github.com/kiwi865/CVEs/blob/main/CVE-2025-63535.mdnvdThird Party Advisory
- drive.google.com/file/d/12yeOXW_sN69QjsQtW0_k9AGqozi1s0di/viewnvdBroken Link
News mentions
0No linked articles in our index yet.