CVE-2024-2074

Summary

CVE-2024-2074 is a newly disclosed critical vulnerability affecting Mini-Tmall up to version 20231017. This issue is related to the processing of the file "?r=tmall/admin/user/1/1" and involves manipulation of the argument "orderBy". The result is a SQL injection vulnerability, which can be exploited remotely. The exploit for this issue has been made public, increasing the risk for potential attacks. The vulnerability has been assigned the identifier VDB-255389 by the Vulnerability Database.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.