CVE-2024-11962
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Nov 28, 2024
Updated: Dec 4, 2024
CWE ID 74
CWE ID 89
Summary
CVE-2024-11962 is a newly disclosed critical vulnerability affecting the Simple Car Rental System 1.0. The issue lies in an unknown functionality of the /login.php file, which can be exploited through sql injection by manipulating the uname argument. This vulnerability allows remote attacks, and the exploit has already been made public, increasing the risk of potential harm.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.