CVE-2024-12890
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Dec 22, 2024
Updated: Dec 25, 2024
CWE ID 89
CWE ID 74
Summary
CVE-2024-12890 is a critical vulnerability affecting the Online Exam Mastering System 1.0. An attacker can exploit this issue by manipulating the argument "eid" in the URL "/update.php?q=quiz&step=2" to inject SQL code. This vulnerability allows remote attacks and has been publicly disclosed, increasing the risk of exploitation. The precise processing where this vulnerability occurs remains unknown, but the impact could potentially be severe.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.