CVE-2024-57430

Summary

CVE-2024-57430 is a newly disclosed SQL injection vulnerability affecting the pjActionGetUser function in PHPJabbers Cinema Booking System version 2.0. This flaw allows attackers to manipulate database queries by tampering with the column parameter. By doing so, they can potentially gain unauthorized access to sensitive information, escalate privileges, or modify data in the database, posing a serious threat to system security. Users are strongly advised to apply the necessary patches or updates to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.