CVE-2024-54811

Summary

CVE-2024-54811 is a significant SQL injection vulnerability affecting the PHPGurukul Park Ticketing Management System version 1.0. The flaw is located in the /index.php file, where an attacker can exploit the "login" parameter to inject and execute arbitrary SQL commands. Successful exploitation could lead to unauthorized access, data theft, or system takeover. Users are strongly advised to update their systems as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.