CVE-2024-9087

Summary

CVE-2024-9087 is a critical SQL injection vulnerability found in the Vehicle Management 1.0 code, specifically affecting the /edit1.php file due to improper handling of the sno argument. This vulnerability can be exploited remotely without requiring user interaction or authentication, posing significant risks to an organization's data confidentiality, integrity, and availability. Affected products include those identified as 't0OPEr' and 'y02Ifl.' To remediate this vulnerability, organizations should patch their applications or implement input validation measures to prevent SQL injection attacks. The CVSS score for this vulnerability is 9.8, indicating its severity and the potential impact of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.