CVE-2025-2038 MEDIUM

CVE-2025-2038: code-projects Blood Bank Management System upload exposure of information through directory listing

Vendor Code-Projects
Product Blood Bank Management System
Weakness CWE-548 · Directory listing
Published March 6, 2025
Last update March 6, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /upload/. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

March 6, 2025 CVE published
March 6, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-3707 Exposure of Information Through Directory Listing vulnerability in OpenGnsys CVE-2024-7809 SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing CVE-2024-8711 SourceCodester Food Ordering Management System includes exposure of information through directory listing CVE-2022-50788 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory CVE-2022-30625 Chcnav - P5E GNSS Directory listing