CVE-2024-12234

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 5, 2024
Updated: Dec 10, 2024
CWE ID 74
CWE ID 89

Summary

CVE-2024-12234: A critical vulnerability was identified in the 1000 Projects Beauty Parlour Management System 1.0. An unknown function in the file /admin/edit-customer-detailed.php is susceptible to SQL injection, allowing attackers to manipulate arguments and launch remote attacks. The exploit has been disclosed to the public, increasing the risk of widespread exploitation. Additionally, other parameters in the system may also be affected.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share