CVE-2024-7101

Summary

CVE-2024-7101 is a critical vulnerability affecting ForIP Tecnologia's Administração PABX 1.x software. The issue lies in the processing of the /login component's Authentication Form and the manipulation of the usuario argument. This manipulation enables SQL injection, posing a remote attack risk. The exploit has been disclosed publicly, increasing the threat level. Vulnerability database identifier VDB-272423 has been assigned. Despite early contact, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.