CVE-2024-10740

Summary

CVE-2024-10740 is a critical vulnerability affecting the E-Health Care System up to version 1.0. An attacker can exploit this issue by manipulating the consulting_id argument in the /Admin/consulting_detail.php file, leading to SQL injection. This vulnerability allows remote attacks, meaning an attacker can initiate the exploit from outside the network. The exploit for this vulnerability has been disclosed to the public, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.