CVE-2024-0543

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 15, 2024
Updated: May 17, 2024
CWE ID 89

Summary

CVE-2024-0543 is a newly disclosed critical vulnerability affecting the CodeAstro Real Estate Management System version 1.0. The issue lies in the file propertydetail.php, where a sql injection vulnerability can be triggered by manipulating the pid argument. This vulnerability enables an attacker to execute arbitrary SQL statements, potentially gaining unauthorized access or data theft. The exploit is publicly known, increasing the risk of attacks. The Vulnerability Database has assigned the identifier VDB-250713 to this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share