CVE-2024-10805

Summary

CVE-2024-10805 is a critical vulnerability affecting the University Event Management System 1.0. The issue lies within the doedit.php file, where the manipulation of the id argument can lead to SQL injection. This vulnerability allows attackers to execute malicious SQL statements remotely. Although the product name in the advisory is unclear, other parameters might also be susceptible to this exploit. The exploit has been disclosed publicly, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.