CVE-2024-3348

Summary

CVE-2024-3348 represents a critical vulnerability in the SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected is an unidentified function of the file booking/index.php. An attacker can exploit this issue by manipulating the log_email/log_pword argument, enabling sql injection. The vulnerability can be exploited remotely, and the public disclosure poses a significant risk as the exploit is already known. (VDB-259452)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.