CVE-2024-9797

Summary

CVE-2024-9797 is a critical vulnerability discovered in the Blood Bank System 1.0, specifically affecting the register.php file where improper handling of user input can lead to SQL injection attacks. This vulnerability allows remote exploitation with no authentication required, posing a high risk to the confidentiality of sensitive data. The CVSS score for this vulnerability is 7.5, indicating a high severity level with low attack complexity. Organizations using this system are advised to apply available patches or updates from the Code Projects website and to implement input validation measures to mitigate potential exploits. Public disclosure of this vulnerability increases the urgency for remediation as attackers may leverage it against affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.