CVE-2024-2673

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Mar 20, 2024
Updated: Mar 21, 2024
CWE ID 89

Summary

CVE-2024-2673 is a critical vulnerability found in Campcodes Online Job Finder System 1.0. This vulnerability allows for SQL injection through the manipulation of the user_email argument in the /admin/login.php file. The exploit can be initiated remotely, posing a potential danger to organizations using this system. The vulnerability has been disclosed to the public and may be actively exploited. It is recommended that organizations affected by this vulnerability apply appropriate security patches or updates to remediate the issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share