CVE-2024-7498

Summary

CVE-2024-7498 is a critical vulnerability affecting the Airline Reservation System 1.0. The issue lies in the login/login2 function of the /admin/login.php file in the Admin Login Page component. Manipulation of the username argument can lead to SQL injection, allowing remote attacks. The exploit for this vulnerability, identified as VDB-273624, has been disclosed to the public, increasing the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.