CVE-2024-6966

Summary

CVE-2024-6966 is a critical vulnerability identified in the Online Blood Bank Management System 1.0. The issue lies within the login.php component's unknown functionality, where manipulation of the user/pass argument leads to SQL injection attacks. These attacks can be launched remotely, and the exploit has already been disclosed to the public, posing a significant threat. (VDB-272120)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.