CVE-2024-1523

Summary

CVE-2024-1523 is a vulnerability affecting the query functionality of EC-WEB FS-EZViewer's web application. This issue allows authenticated attackers to inject SQL commands, enabling them to read, modify, and delete database records, as well as execute system commands. Attackers can potentially escalate their privileges by leveraging the dbo privilege in the database, elevating their access to administrator level. This vulnerability poses a significant risk to the security of web applications using EC-WEB FS-EZViewer's query functionality and requires urgent attention for patching or mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.