CVE-2024-3349

Summary

CVE-2024-3349 is a newly disclosed critical vulnerability affecting the SourceCodester Aplaya Beach Resort Online Reservation System version 1.0. This issue lies in an unknown functionality of the file admin/login.php, which can be exploited through sql injection by manipulating the email argument. The attack can be carried out remotely, allowing unauthorized access to the system. The vulnerability identification number VDB-259453 has been assigned to this risk, and the exploit is currently publicly available, increasing the potential for widespread exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.