CVE-2024-7637

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 12, 2024
Updated: Aug 15, 2024
CWE ID 89

Summary

CVE-2024-7637 is a critical vulnerability affecting the code-projects Online Polling 1.0 component. The issue lies in the Registration's file registeracc.php, which is susceptible to SQL injection. An attacker can manipulate the email argument to exploit this vulnerability, potentially gaining unauthorized access remotely. This vulnerability has been publicly disclosed, increasing the risk of exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share