Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-40470 — Cross Site Scripting in Blood Donor Management System Using CodeIgniter - 1.0 | Kitploit
Tools/GitHubGitHub/rashidkhanpathan/cve-2022-40470
Vulnerability AnalysisWeb Application ExploitationWeb SecurityPenetration TestingLearning & Education
GitHubrashidkhanpathan/cve-2022-40470

CVE-2022-40470

Cross Site Scripting in Blood Donor Management System Using CodeIgniter - 1.0

View Repository
23 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-40470

Cross Site Scripting in Blood Donor Management System Using CodeIgniter - 1.0

[Suggested description] Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature.

[Additional Information] PoC: https://drive.google.com/file/d/1UDuez2CTscdWXYzyXLi3x8CMs9IWLL11/view?usp=sharing

[Vulnerability Type] Cross Site Scripting (XSS)

[Vendor of Product] Phpgurukul

[Affected Product Code Base] Blood Donor Management System Using CodeIgniter - 1.0

[Affected Component] Source Code

[Attack Type] Remote

[Impact Code execution] true

[Attack Vectors] to exploit the vulnerability attacker needs to Login as Admin then inject arbitrary code in Add Blood Group Name Field and Click Submit and then go to Manage Blood Group once attacker go inside Manage Blood Group the Payload Will Execute

[Reference] https://drive.google.com/file/d/1UDuez2CTscdWXYzyXLi3x8CMs9IWLL11/view?usp=sharing

[Discoverer] RashidKhan Pathan

Use CVE-2022-40470.

Download Tool