CVE-2024-1784
CVSS 2.0 Score 3.7 of 10 (low)
Details
Published Feb 23, 2024
Updated: May 17, 2024
CWE ID 89
Summary
CVE-2024-1784 is a newly disclosed vulnerability affecting Limbas 5.2.14. The issue lies in an unknown functionality of the file main_admin.php, where manipulation of the tab_group argument facilitates SQL injection. The attack's complexity is relatively high, making exploitation difficult. The vulnerability has been publicly disclosed, increasing the risk of exploitation. The associated identifier for this vulnerability is VDB-254575. Notably, the vendor was notified about this disclosure but did not respond.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.