Executive Summary

This vulnerability is a session fixation issue in the Blood Bank Management System 1.0 login.php. It allows an attacker to set or predict a user's session ID before they authenticate. When the user logs in, the system continues to use the attacker-supplied session ID instead of generating a new one, enabling the attacker to hijack the authenticated session and access the victim's account without authorization.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to gain unauthorized access to a victim's account by hijacking their authenticated session. This could lead to exposure of sensitive personal or medical information, unauthorized actions performed on behalf of the victim, and potential compromise of the system's integrity and confidentiality.

Useful 0 Not Useful 0