CVE-2024-2916

Summary

CVE-2024-2916 is a newly disclosed critical vulnerability affecting the Campcodes House Rental Management System 1.0. An unknown function in the file ajax.php is the culprit, allowing an attacker to execute SQL injection through manipulation of the username argument. This vulnerability can be exploited remotely, and the exploit has been made public, increasing the risk of attacks. Vulnerability database VDB assigns the identifier VDB-257982 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.