CVE-2024-9812
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 10, 2024
Updated: Oct 15, 2024
CWE ID 89
Summary
CVE-2024-9812 is a critical vulnerability affecting the code-projects Crud Operation System 1.0. The issue lies within the file delete.php, and it can be exploited through the manipulation of the sid argument. This leads to SQL injection, allowing remote attackers to execute unauthorized queries and potentially gain unauthorized access. The exploit for this vulnerability has been made public, increasing the risk of widespread exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Code Projects