CVE-2024-3255

Summary

CVE-2024-3255 is a critical vulnerability identified in the SourceCodester Internship Portal Management System 1.0. This issue affects an unspecified function within the admin/edit_admin_query.php file. An attacker can exploit this vulnerability by manipulating the arguments username, password, name, or admin_id through SQL injection. The exploitation of this vulnerability can be carried out remotely, and the exploit for this issue has been made public. As a result, it is imperative that users of this system apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.