CVE-2024-12969

Summary

CVE-2024-12969 is a newly disclosed critical vulnerability affecting the Hospital Management System 1.0 and its /admin/index.php component, specifically the Login functionality. This issue allows an attacker to execute SQL injection by manipulating the username/password argument, potentially gaining unauthorized access to sensitive data. The vulnerability can be exploited remotely, making it a significant risk for organizations using this software. The exploit for this vulnerability has been made public, increasing the urgency for affected organizations to apply patches or workarounds to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.