CVE-2024-7190

Summary

CVE-2024-7190 is a critical vulnerability affecting Society Management System 1.0. This issue lies in an unidentified functionality of the file /admin/get_price.php, which can be exploited through sql injection. Manipulating the argument expenses_id allows remote attackers to launch the exploit. The vulnerability has been publicly disclosed, increasing the risk of potential attacks. The associated identifier for this vulnerability is VDB-272611.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.