CVE-2024-11590
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Nov 21, 2024
Updated: Nov 22, 2024
CWE ID 74
CWE ID 89
Summary
CVE-2024-11590 is a critical vulnerability affecting the 1000 Projects Bookstore Management System 1.0. The issue lies within an unspecified functionality of the file "/forget_password_process.php." An attacker can exploit this flaw through sql injection by manipulating the argument "unm." Given that the exploit has been disclosed publicly, remote attacks are a concern.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share