CVE-2024-57151
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Published Mar 18, 2025
Updated: Apr 1, 2025
CWE ID 89
Summary
CVE-2024-57151 is a newly disclosed SQL injection vulnerability that affects the rainrocka xinhu version 2.6.5 and older. An attacker can exploit this flaw by injecting malicious SQL code into the inputAction.php file and the saveAjax function, ultimately leading to the execution of arbitrary code remotely. This vulnerability poses a significant risk and requires prompt patching to prevent potential unauthorized access and data manipulation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.