CVE-2024-33972

Summary

CVE-2024-33972 refers to a significant SQL injection vulnerability in PayPal's payment system, affecting version 1.0. An attacker can exploit this weakness by sending a maliciously crafted query to the server through the '/report/event_print.php' parameter's 'events' input. By doing so, they could potentially gain unauthorized access to all stored information in the database. This security flaw poses a serious risk to financial data and underscores the importance of keeping software up-to-date with the latest security patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.