CVE-2024-9812

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Oct 10, 2024
Updated: Oct 15, 2024
CWE ID 89

Summary

CVE-2024-9812 is a critical vulnerability affecting the code-projects Crud Operation System 1.0. The issue lies within the file delete.php, and it can be exploited through the manipulation of the sid argument. This leads to SQL injection, allowing remote attackers to execute unauthorized queries and potentially gain unauthorized access. The exploit for this vulnerability has been made public, increasing the risk of widespread exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share