CVE-2024-33973

Summary

CVE-2024-33973 is a newly disclosed SQL injection vulnerability affecting PayPal's payment system, specifically versions 1.0. An attacker can exploit this issue by crafting a malicious query to the server via the '/report/attendance_print.php' page. The vulnerability lies in the 'Attendance' and 'YearLevel' parameters, allowing an attacker to potentially retrieve all stored information on the server. This type of vulnerability could lead to significant data breaches and financial loss. It is strongly advised that affected organizations apply the necessary patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.