CVE-2024-9804

Summary

CVE-2024-9804 is a newly disclosed critical vulnerability affecting the Blood Bank System 1.0 developed by code-projects. The issue lies in the file /admin/campsdetails.php, where an sql injection vulnerability was discovered. Attackers can remotely manipulate the 'hospital' argument to execute malicious SQL queries, potentially compromising other parameters as well. The existence and exploit of this vulnerability have been made public, increasing the risk of attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.