CVE-2024-2077

Summary

CVE-2024-2077 is a newly disclosed critical vulnerability in SourceCodester Simple Online Bidding System 1.0. The issue lies within the index.php file and arises from the manipulation of the category_id argument. This flaw enables attackers to execute SQL injection attacks, which can be initiated remotely. The exploit for this vulnerability has been made public, increasing the threat to affected systems. Vulnerability Database has assigned the identifier VDB-255393 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.