CVE-2024-7797

Summary

CVE-2024-7797 is a newly disclosed critical vulnerability affecting the SourceCodester Simple Online Bidding System 1.0. This issue lies within an unknown function of the file "/simple-online-bidding-system/bidding/admin/ajax.php?action=login." An attacker can exploit this vulnerability through manipulation of the argument "username," which leads to SQL injection. The vulnerability allows for remote attacks and has been publicly disclosed, increasing the risk of exploitation. System administrators are urged to patch their installations as soon as possible to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.