CVE-2024-9316
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 28, 2024
Updated: Oct 2, 2024
CWE ID 89
Summary
CVE-2024-9316 is a newly disclosed critical vulnerability in the Blood Bank Management System 1.0. This issue lies within an unidentified function of the file /admin/blood/update/B+.php, making Bloodname an exploitable argument. Successful attacks can lead to SQL injection, enabling remote manipulation of the system. The exploit for this vulnerability has been made public, posing a significant threat to users until appropriate patches are applied.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Blood Bank Management System
Affected Vendors
- Code Projects