CVE-2024-12884
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Dec 21, 2024
Updated: Jan 10, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2024-12884 is a critical vulnerability affecting the Codezips E-Commerce Website 1.0. The issue lies within the /login.php file, and an attacker can exploit it through manipulation of the email argument. This vulnerability results in SQL injection, allowing the attacker to gain unauthorized access remotely. The exploit for this vulnerability has been made public, increasing the risk of widespread attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Codezips E-Commerce Site