CVE-2024-10947

Summary

CVE-2024-10947 is a critical vulnerability discovered in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to version 2.0.1. This issue resides in the unknown code of the file /interlib/order/BatchOrder, where the argument bookrecno is susceptible to SQL injection. An attacker can exploit this remotely, taking advantage of the disclosed exploit. Despite early notification, the vendor has not responded to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.