CVE-2024-50524

CVSS 3.1 Score 8.5 of 10 (high)

Details

Published Nov 9, 2024
Updated: Nov 12, 2024
CWE ID 89

Summary

CVE-2024-50524 is a newly disclosed SQL Injection vulnerability affecting the quyle91 Administrator Z software. Hackers can exploit this issue to perform Blind SQL Injection attacks, which allow them to extract sensitive information from the database without directly accessing the data. The vulnerability exists due to improper neutralization of special elements used in SQL commands. quyle91 Administrator Z versions from n/a up to 2024.11.04 are vulnerable to this attack. Users are advised to upgrade to a patched version as soon as possible to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share