Local File Inclusion Vulnerability Affects Blood Bank Management System
CVE-2024-9040

5.5MEDIUM

Key Information:

Vendor: Code-projects
Status: Blood Bank Management System
Vendor: CVE Published:; 20 September 2024

Summary

A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation leads to cleartext storage in a file or on disk. An attack has to be approached locally.

References

https://vuldb.com/?id.278211

https://vuldb.com/?ctiid.278211

https://code-projects.org/

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Sep 20, 2024