CVE-2024-1827

Summary

CVE-2024-1827 is a critical vulnerability impacting the code-projects Library System 1.0. This issue involves the handling of the arguments username and password in the file Source/librarian/user/teacher/login.php. Attackers can exploit this vulnerability through sql injection, potentially gaining unauthorized access to the system. The exploit has been disclosed to the public, increasing the risk of remote attacks. The vulnerability identifier is VDB-254615.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.