CVE-2024-1353

Summary

CVE-2024-1353 is a critical vulnerability affecting PHPEMS versions up to 1.0. The issue lies in the index function of the file app/weixin/controller/index.api.php, which can be exploited through manipulation of the picurl argument. This results in deserialization, making the vulnerability publicly disclosed and potentially exploitable. VDB-253226 is the identifier assigned to this security concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.