CVE-2024-12936
CVSS 2.0 Score 6.5 of 10 (medium)
Details
Published Dec 26, 2024
CWE ID 74
CWE ID 89
Summary
CVE-2024-12936 is a newly-discovered critical vulnerability affecting Simple Admin Panel version 1.0. This issue arises from a processing flaw in the catDeleteController.php file. An attacker can exploit this vulnerability by manipulating an argument record, leading to SQL injection. The vulnerability allows remote attacks, increasing the risk to systems running the affected software. Public disclosure of the exploit heightens the urgency for affected organizations to apply the necessary patches to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.