CVE-2024-12486

Summary

CVE-2024-12486 is a critical vulnerability affecting the code-projects Online Class and Exam Scheduling System 1.0. The issue lies within an unnamed function in the file /pages/rank_update.php, which can be exploited through SQL injection. The manipulation of the argument id permits an attacker to inject malicious SQL code, potentially leading to unauthorized access or data theft. Remotely executing the exploit is possible. The vulnerability has been disclosed to the public, increasing the risk of its exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.