CVE-2024-2520

Summary

CVE-2024-2520 is a newly disclosed critical vulnerability affecting the MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0. The issue lies in an unknown functionality of the file /admin/bookdate.php, which allows for sql injection when the argument room_id is manipulated. This vulnerability can be exploited remotely, meaning an attacker does not need to have local access to the system. The exploit for this vulnerability has been disclosed to the public, increasing the risk of potential attacks. The vulnerability has been assigned the identifier VDB-256957. Despite early disclosure, the vendor has not responded to reports about this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.