CVE-2024-33965

Summary

CVE-2024-33965 is a newly disclosed SQL injection vulnerability that affects PayPal's payment processing system, specifically versions 1.0. An attacker can exploit this issue by sending a maliciously crafted query to the server via the '/tubigangarden/admin/mod_accomodation/index.php' parameter in an attempt to retrieve sensitive information stored on the server. Successful exploitation could lead to data theft, including credit card and debit card information. This vulnerability poses a significant risk to PayPal users and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.