CVE-2024-3618

Summary

CVE-2024-3618 is a critical vulnerability affecting the SourceCodester Kortex Lite Advocate Office Management System version 1.0. An unknown function in the file /control/activate_case.php contains an sql injection vulnerability. By manipulating the argument id, attackers can inject malicious SQL code, potentially leading to unauthorized access or data exfiltration. The attack can be launched remotely, increasing the risk. The exploit for this vulnerability has been disclosed to the public, making it an imminent threat. VDB-260274 is the identifier assigned to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.