Threats tagged 'ghsa-q3rj-6jv9-wrxm'

A SQL injection vulnerability exists in code-projects BloodBank Managing System 1.0 in the get_state.php file via the G_STATE_ID parameter. This flaw allows remote attackers with limited privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Public exploit code has been disclosed. The vulnerability has a medium severity rating with a CVSS score of 6.3.