CVE-2024-55103

Summary

CVE-2024-55103 is a newly discovered SQL injection vulnerability affecting the Online Nurse Hiring System v1.0. This issue resides in the /admin/profile.php component, which can be exploited by malicious actors through the fullname parameter. By injecting maliciously crafted SQL queries, attackers can potentially gain unauthorized access to sensitive data, modify or delete records, and even take control of the database. This vulnerability poses a serious threat to the security and integrity of the affected system and requires immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.