CVE-2024-50713

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 27, 2024
Updated: Dec 31, 2024
CWE ID 89

Summary

CVE-2024-50713: A SQL injection vulnerability was identified in SmartAgent v1.1.0, affecting the interface.php file located at /tests. An attacker can exploit this weakness by inserting malicious SQL statements into the id parameter, potentially gaining unauthorized access to sensitive data or even complete system control. This issue poses a significant risk to organizations using this version of SmartAgent and requires an immediate upgrade to a secure version.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share