CVE-2026-7732

10th percentile - higher than 10% of all known CVEs

A vulnerability was detected in code-projects BloodBank Managing System 1.0 in an unknown function of request_blood.php. The manipulation results in unrestricted upload. The attack can be executed remotely and the exploit is now public.

An attacker may upload malicious files, such as executable scripts, potentially leading to server compromise or code execution. The public exploit facilitates abuse.

Restrict file types and sizes, validate content server-side, and store uploads outside the web root. Plan to update or replace the application.