CVE-2026-7731 - Vulnerability Analysis

Overview

code-projects BloodBank Managing System 1.0 contains a sql injection caused by manipulation of the "G_STATE_ID" argument in get_state.php, letting remote attackers execute arbitrary SQL commands, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version.

References

• https://code-projects.org/
• https://github.com/QAp89/CVE/blob/main/SQL3.md
• https://vuldb.com/submit/807557
• https://vuldb.com/vuln/360906
• https://vuldb.com/vuln/360906/cti

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner