CVE-2024-54920

Summary

CVE-2024-54920 is a newly discovered SQL Injection vulnerability affecting the kashipara E-learning Management System version 1.0. The vulnerability resides in the /teacher_signup.php file, where the firstname, lastname, and class_id parameters are at risk. An attacker can exploit this flaw to inject malicious SQL commands, ultimately gaining unauthorized access to the system's database. This vulnerability poses a significant risk as it can lead to data theft and potential system compromise. It is strongly advised to update the E-learning Management System to a secure version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.