CVE-2024-41512
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Oct 4, 2024
Updated: Oct 7, 2024
CWE ID 89
Summary
CVE-2024-41512 is a SQL Injection vulnerability affecting all versions of CADClick v.1.11.0 and prior. The flaw resides in the "ccHandler.aspx" file, enabling remote attackers to execute arbitrary SQL commands by manipulating the "bomid" parameter. This vulnerability poses a significant risk, as SQL Injection attacks can lead to unauthorized access, data theft, and system compromise. It is crucial for CADClick users to apply the necessary patches or updates to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.