CVE-2024-11646

Summary

CVE-2024-11646: A critical sql injection vulnerability has been identified in the 1000 Projects Beauty Parlour Management System 1.0. This issue affects the functionality of the file /admin/edit-services.php, specifically the sername argument. An attacker can remotely exploit this vulnerability by manipulating the input, leading to unauthorized SQL query execution. The exploit for this vulnerability has been made public, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.