A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. The affected element is an unknown function of the file /admin/campsdetails.php. Performing a manipulation of the argument hospital results in sql injection.

This vulnerability is reported as CVE-2026-10250. The attack is possible to be carried out remotely. Moreover, an exploit is present.