CVE-2024-3522

Summary

CVE-2024-3522 is a newly disclosed critical vulnerability affecting the Campcodes Online Event Management System version 1.0. The issue lies in the /api/process.php file, and an attacker can exploit it by manipulating the userId argument. This leads to SQL injection, allowing the attacker to execute malicious SQL statements. The attack can be initiated remotely, making it a significant security risk. The vulnerability has been made public, increasing the threat of exploitation. Vulnerability Database has assigned the identifier VDB-259893 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.