CVE-2024-50524
CVSS 3.1 Score 8.5 of 10 (high)
Details
Summary
CVE-2024-50524 is a newly disclosed SQL Injection vulnerability affecting the quyle91 Administrator Z software. Hackers can exploit this issue to perform Blind SQL Injection attacks, which allow them to extract sensitive information from the database without directly accessing the data. The vulnerability exists due to improper neutralization of special elements used in SQL commands. quyle91 Administrator Z versions from n/a up to 2024.11.04 are vulnerable to this attack. Users are advised to upgrade to a patched version as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.