CVE-2024-0426

Summary

CVE-2024-0426 is a critical vulnerability affecting ForU CMS versions up to 2020-06-23. The issue lies in the processing of the file admin/cms_template.php, where manipulation of the arguments t_name and t_path can result in SQL injection. This vulnerability allows remote attacks, making it a significant security risk. The exploit for this vulnerability has been disclosed to the public, increasing the likelihood of its usage in cyberattacks. The vulnerability has been assigned the identifier VDB-250445.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.