CVE-2024-40472

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 12, 2024
Updated: Aug 15, 2024
CWE ID 89

Summary

CVE-2024-40472 is a newly identified vulnerability affecting the Sourcecodester Daily Calories Monitoring Tool version 1.0. Hackers can exploit this issue by injecting malicious SQL commands into the "delete-calorie.php" file, potentially leading to unauthorized deletion of data or even database compromise. The vulnerability could allow attackers to manipulate the application's functionality, posing a significant risk to data security. Users are advised to upgrade to a patched version or apply workarounds to mitigate the threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share