CVE-2024-10969
CVSS 2.0 Score 7.5 of 10 (high)
Details
Published Nov 7, 2024
Updated: Nov 8, 2024
CWE ID 89
CWE ID 74
Summary
CVE-2024-10969: A critical sql injection vulnerability has been identified in the 1000 Projects Bookstore Management System 1.0. This issue affects the functionality of the /admin/login_process.php component's Login, specifically the manipulation of the unm argument. An attacker can exploit this remotely, gaining unauthorized access to the system. The exploit for this vulnerability has been made public.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.