CVE-2023-46020

Name of the Vulnerable Software and Affected Versions Code-Projects Blood Bank version 1.0

Description The issue allows attackers to run arbitrary code via the rename, remail, rphone, and rcity parameters in the "updateprofile.php" file. This can lead to the execution of malicious scripts.

Recommendations For Code-Projects Blood Bank version 1.0, consider validating and sanitizing the rename, remail, rphone, and rcity parameters in the "updateprofile.php" file to prevent arbitrary code execution. As a temporary workaround, restrict access to the "updateprofile.php" file until a patch is available.