CVE-2024-55509
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Dec 20, 2024
Updated: Dec 26, 2024
CWE ID 89
Summary
CVE-2024-55509 is an SQL injection vulnerability affecting the CodeAstro Complaint Management System version 1.0. A remote attacker can exploit this flaw by manipulating the id parameter in the delete.php component to inject malicious SQL queries, potentially leading to arbitrary code execution and privilege escalation. This vulnerability poses a serious risk to systems that have not been patched, and immediate remediation is recommended.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.