CVE-2024-2676

Summary

A vulnerability with the CVE ID CVE-2024-2676 has been discovered in Campcodes Online Job Finder System 1.0. The vulnerability is classified as critical and is related to an unknown function in the file /admin/company/controller.php, which can be manipulated to execute a SQL injection attack. This vulnerability can be exploited remotely and has been publicly disclosed. The potential danger it poses to an organization includes partial availability and confidentiality, low integrity impact, and low attack complexity. The base severity score is medium, with a base score of 6.3, and the exploitability score is 2.8. It is recommended to remediate this vulnerability promptly to mitigate any potential risks or impact on the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.