Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability — Reflected XSS exploit for Code-Projects Blood Bank V1.0 via the 'search' parameter in abs.php, with PoC payload and CVE-2023-46016 documentation. | Kitploit
Tools/GitHubGitHub/ersinerenler/cve-2023-46016-code-projects-blood-bank-1.0-reflected-cross-site-scripting-vulnerability
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubersinerenler/cve-2023-46016-code-projects-blood-bank-1.0-reflected-cross-site-scripting-vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

Reflected XSS exploit for Code-Projects Blood Bank V1.0 via the 'search' parameter in abs.php, with PoC payload and CVE-2023-46016 documentation.

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

  • Exploit Author: ersinerenler

Vendor Homepage

  • https://code-projects.org/blood-bank-in-php-with-source-code

Software Link

  • https://download-media.code-projects.org/2020/11/Blood_Bank_In_PHP_With_Source_code.zip

Overview

  • Code-Projects Blood Bank V1.0 is susceptible to a significant security vulnerability involving Reflected Cross-Site Scripting (XSS) through the 'search' parameter in the abs.php file. The application fails to adequately sanitize user-supplied data, making it prone to script injection attacks. An attacker can exploit this issue to execute arbitrary script code in the browser of unsuspecting users, potentially compromising their security and privacy within the affected site.

Vulnerability Details

  • CVE ID: CVE-2023-46016
  • Affected Version: Blood Bank V1.0
  • Vulnerable File: /abs.php
  • Parameter Name: search
  • Attack Type: local

    • References:

    • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46016
    • https://nvd.nist.gov/vuln/detail/CVE-2023-46016

    Description

    • The 'search' parameter in the abs.php file of Code-Projects Blood Bank V1.0 is susceptible to Reflected Cross-Site Scripting (XSS). This vulnerability arises due to insufficient input validation and sanitation of user-supplied data. An attacker can exploit this weakness by injecting malicious scripts into the 'search' parameter, which, when executed, could compromise the user's browser within the context of the affected site.

    Proof of Concept (PoC) :

    • Payload: %22%3E%3C/option%3E%20%3C/select%3E%3Cbr%3E%3Csvg/onload=alert(document.domain)%3E
    • http://localhost/bloodbank/abs.php?search=%22%3E%3C/option%3E%20%3C/select%3E%3Cbr%3E%3Csvg/onload=alert(document.domain)%3E
    image
    Download Tool