CVE-2024-24495

Summary

CVE-2024-24495 is a newly identified SQL Injection vulnerability that affects the delete-tracker.php file in the Daily Habit Tracker version 1.0. An attacker can exploit this vulnerability by crafting a malicious GET request, allowing them to execute arbitrary code remotely. Successful exploitation could result in unauthorized access, data theft, or system damage. Users are urged to update their Daily Habit Tracker installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.