CVE-2024-53364

Summary

CVE-2024-53364 is a SQL injection vulnerability affecting the PHPGURUKUL Vehicle Parking Management System version 1.13. The issue lies within the /users/view-detail.php file, specifically the viewid parameter, which fails to adequately sanitize user input. Attackers can exploit this vulnerability by injecting malicious SQL queries, potentially gaining unauthorized access to sensitive data or even executing administrative commands. This vulnerability poses a significant threat and requires immediate attention and patching from system administrators.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.