CVE-2024-2517

Summary

CVE-2024-2517 is a critical vulnerability found in the MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This vulnerability affects the file book_history.php, allowing for remote initiation of a SQL injection attack through the manipulation of the argument del_id. The exploit has been disclosed to the public and may be utilized. The vendor was contacted but did not respond. The vulnerability has a CVSS score of 6.5, indicating a medium severity level, with low privileges required and no user interaction necessary for exploitation. The impact is low in terms of integrity and confidentiality. Remediation steps are not provided in the available information, and no analysis description is given.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.