CVE-2024-46532

Summary

CVE-2024-46532 is a newly disclosed SQL Injection vulnerability that affects the OpenHIS v.1.0 platform. This issue resides in the PayController.class.php component, specifically in the refund function. An attacker can exploit this vulnerability to inject malicious SQL queries and gain unauthorized access to sensitive data or even execute arbitrary code. Successful exploitation could lead to serious data breaches or system compromise. Users of OpenHIS v.1.0 are strongly advised to update to the latest version or apply patches provided by the vendor to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.