CVE-2024-7081
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-7081 is a newly disclosed critical vulnerability affecting the Tailoring Management System 1.0. The vulnerability lies in the obscure functionality of the file expcatadd.php, which can be exploited through sql injection. By manipulating the argument title, an attacker can inject malicious SQL commands, potentially gaining unauthorized access to sensitive data. This issue can be exploited remotely, increasing the risk to affected systems. The vulnerability has been publicly disclosed and exploit code is available, making it an imminent threat. VDB-272366 is the identifier assigned to this security flaw.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Tailoring Management System
Affected Vendors
- Itsourcecode