CVE-2025-2038

HIGH

Blood Bank Management System 1.0 - Info Disclosure

Title source: llm

Description

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /upload/. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0015
EPSS Percentile 35.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-552 CWE-548
Status published

Affected Products (1)

code-projects/blood_bank_management_system

Timeline

Published Mar 06, 2025
Tracked Since Feb 18, 2026