# CVE-2025-63525: An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with…

Source: https://junglewise.ai/threats/cve-2025-63525-an-issue-was-discovered-in-blood-bank-management-system-1-0  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-01  
License: CC BY 4.0 with a link back

CVE-2025-63525 · Severity: critical · CVSS 9.6 · Published 2025-12-01

An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges via crafted request to delete.php.

Technologies: [Shridharshukl Blood Bank Management System](https://junglewise.ai/threats/technologies/shridharshukl-blood-bank-management-system). Vendors: [Shridharshukl](https://junglewise.ai/threats/vendors/shridharshukl).

## Quick answers

**Is CVE-2025-63525 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-63525 being exploited in the wild.

**How severe is CVE-2025-63525?** Critical severity, with a CVSS score of 9.6, published 1 December 2025.

**Which products and versions are affected?** Shridharshukl Blood Bank Management System. The advisory does not name versions.

**Is there a fix for CVE-2025-63525?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-63525?** Check whether you run Shridharshukl Blood Bank Management System. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Shridharshukl Blood Bank Management System

## Related threats

- [A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The…](https://junglewise.ai/threats/cve-2025-63535-a-sql-injection-vulnerability-exists-in-the-blood-bank-management)
- [A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the login.php…](https://junglewise.ai/threats/cve-2025-63534-a-cross-site-scripting-xss-vulnerability-exists-in-the-blood-bank)
- [A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php…](https://junglewise.ai/threats/cve-2025-63533-a-cross-site-scripting-xss-vulnerability-exists-in-the-blood-bank)
- [A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The…](https://junglewise.ai/threats/cve-2025-63532-a-sql-injection-vulnerability-exists-in-the-blood-bank-management)
- [A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component…](https://junglewise.ai/threats/cve-2025-63531-a-sql-injection-vulnerability-exists-in-the-blood-bank-management)