CVE-2024-7635

Summary

CVE-2024-7635 is a newly disclosed critical vulnerability affecting Simple Ticket Booking 1.0. The issue lies in an unknown function of the file register_insert.php within the Registration Handler component. An attacker can exploit this SQL injection vulnerability by manipulating the name, email, dob, password, Gender, or phone arguments. The exploit can be launched remotely, making it a significant threat. The vulnerability has been made public, increasing the risk of widespread attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.