CVE-2024-1820

Summary

CVE-2024-1820 is a newly disclosed critical vulnerability affecting the Crime Reporting System 1.0. The issue lies in the code of the inchargelogin.php file and allows for sql injection through manipulation of the email/password argument. This vulnerability can be exploited remotely, making it a significant security risk. The exploit for this vulnerability has been made public, increasing the likelihood of attacks. The identifier for this vulnerability is VDB-254608.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.