CVE-2025-11481

Medium

Description

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donate_blood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.

SeverityMedium
CVSS6.3
Exploit probability—
ProductVarunsardana004 Blood Bank And Donation Management System
PublishedOct 8, 2025
First seenOct 8, 2025

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
varunsardana004 blood_bank_and_donation_management_systemv ≤ 2021-03-18—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-11481 · Varunsardana004 Blood Bank And Donation Management System · Dark Radar