CVE-2024-13093

Summary

CVE-2024-13093 is a newly disclosed critical vulnerability affecting the Seeker Profile Handler component in version 1.0 of the Job Recruitment software. This issue arises from an unsecured processing of the /_parse/_call_main_search_ajax.php file, resulting in SQL injection. An attacker can exploit this vulnerability remotely by manipulating the s1 argument, potentially gaining unauthorized access to sensitive data or taking control of the affected system. The exploit code for this vulnerability has been made public, increasing the risk of widespread attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.