Code-Projects Blood Bank System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Code-Projects Blood Bank System version 1.0. The issue resides in the file '/Blood/A+.php', where the 'Availibility' parameter is not properly sanitized, allowing for the injection of malicious scripts. This vulnerability can be exploited remotely, potentially leading to the theft of administrator credentials or facilitating phishing attacks.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a GET request to '/Blood/A+.php' with a crafted 'Availibility' parameter that includes the desired script payload. This can be done using a web browser or a tool like Burp Suite. The injected script will be executed in the context of the user viewing the page.