CVE-2024-9328
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-9328 is a critical vulnerability identified in SourceCodester's Advocate Office Management System version 1.0, specifically affecting the file /control/edit_client.php. The flaw arises from improper handling of the "id" parameter, which allows for SQL injection attacks that can be executed remotely without requiring user interaction or special privileges. The potential impact includes high risks to confidentiality, integrity, and availability of organizational data due to unauthorized access and manipulation. To remediate this vulnerability, organizations should apply security patches released by the vendor or implement input validation controls to mitigate SQL injection risks. The exploit has been publicly disclosed, increasing the urgency for affected users to address it promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions