CVE-2024-3252

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Apr 3, 2024
Updated: May 17, 2024
CWE ID 22

Summary

CVE-2024-3252 is a critical vulnerability affecting the SourceCodester Internship Portal Management System 1.0. The issue lies in an unspecified part of the admin/check_admin.php file, which can be exploited through SQL injection by manipulating the username/password argument. This vulnerability allows remote attacks, meaning an attacker does not need to have local access to the system to exploit it. The exploit for this vulnerability has been made public, increasing the risk of it being used maliciously. The vulnerability has been assigned the identifier VDB-259101.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share