CVE-2024-1832

Summary

CVE-2024-1832 is a newly disclosed critical vulnerability affecting SourceCodester Complete File Management System 1.0. The issue lies in an unknown functionality of the /admin/ component, specifically the Admin Login Form. This vulnerability allows for sql injection by manipulating the argument username with the input "torada%27+or+%271%27+--+-". Attacks can be launched remotely and the exploit has been made public, posing a significant risk for systems using this software. The associated identifier for this vulnerability is VDB-254623.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.