CVE-2024-3538

Summary

CVE-2024-3538 is a newly disclosed critical vulnerability affecting the Campcodes Church Management System version 1.0. The issue lies within an unknown function of the file /admin/addTithes.php and can be exploited through sql injection. Malicious actors can manipulate the argument 'na' to launch attacks remotely, making this a significant security risk. The vulnerability has been publicly disclosed, increasing the likelihood of exploitation. Its identifier is VDB-259908.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.