CVE-2024-12488

Summary

CVE-2024-12488 is a critical vulnerability affecting the code-projects Online Class and Exam Scheduling System 1.0. The issue lies in an unspecified functionality of the file /pages/subject_update.php, which can be exploited through SQL injection. Manipulation of the id argument can lead to remote attacks, and the exploit for this vulnerability has been made public, increasing the risk for potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.