CVE-2024-10737

Summary

CVE-2024-10737 is a critical vulnerability that affects the Codezips Free Exam Hall Seating Management System version 1.0. An unknown function in the file /teacher.php contains an SQL injection flaw, which can be triggered by manipulating the email argument. This vulnerability allows attackers to launch remote attacks by injecting malicious SQL queries into the system. The exploit for this vulnerability has been made public, increasing the risk of widespread exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.