CVE-2024-4928

Summary

CVE-2024-4498: A critical vulnerability was discovered in SourceCodester Simple Online Bidding System 1.0. The issue lies within an unknown functionality of the file /simple-online-bidding-system/admin/ajax.php?action=delete_category. Manipulation of the id argument enables SQL injection, making the exploit remotely executable. The vulnerability has been disclosed to the public and may be actively exploited. (VDB-264464)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.