CVE-2026-2060

A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /simpleblooddonor/editcampaignform.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
References
Link Resource
https://code-projects.org/ Product
https://github.com/kyxh001/CVE/issues/1 Exploit Issue Tracking Mitigation Third Party Advisory
https://vuldb.com/?ctiid.344620 Permissions Required VDB Entry
https://vuldb.com/?id.344620 Third Party Advisory VDB Entry
https://vuldb.com/?submit.744262 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabian:simple_blood_donor_management_system:1.0:*:*:*:*:*:*:*

History

11 Feb 2026, 19:04

Type Values Removed Values Added
CPE cpe:2.3:a:fabian:simple_blood_donor_management_system:1.0:*:*:*:*:*:*:*
First Time Fabian
Fabian simple Blood Donor Management System
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://github.com/kyxh001/CVE/issues/1 - () https://github.com/kyxh001/CVE/issues/1 - Exploit, Issue Tracking, Mitigation, Third Party Advisory
References () https://vuldb.com/?ctiid.344620 - () https://vuldb.com/?ctiid.344620 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.344620 - () https://vuldb.com/?id.344620 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.744262 - () https://vuldb.com/?submit.744262 - Third Party Advisory, VDB Entry

06 Feb 2026, 18:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-06 18:16

Updated : 2026-02-11 19:04


NVD link : CVE-2026-2060

Mitre link : CVE-2026-2060

CVE.ORG link : CVE-2026-2060


JSON object : View

Products Affected

fabian

  • simple_blood_donor_management_system
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')