CVE-2024-50823

Summary

CVE-2024-50823: A critical SQL Injection vulnerability has been identified in the /admin/login.php file of the kashipara E-learning Management System Project 1.0. This issue arises due to insufficient input validation on the username and password parameters, allowing an attacker to inject malicious SQL code and potentially gain unauthorized access to sensitive data. Successful exploitation could result in account takeover, data theft, or even system compromise. It is strongly recommended that users upgrade to the latest version of the software or implement appropriate input validation measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.