CVE-2024-7449

Summary

CVE-2024-7449 is a critical vulnerability affecting the Placement Management System 1.0. This issue lies within an unnamed function in the login.php file. Manipulation of the email argument leads to a SQL injection vulnerability, allowing attackers to launch remote attacks. The exploit for this vulnerability has been made public, increasing the risk of exploitation. The identifier for this vulnerability is VDB-273540.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.