CVE-2024-4967

Summary

CVE-2024-4967 is a critical vulnerability affecting SourceCodester Interactive Map with Marker 1.0. An unknown functionality in the file /endpoint/delete-mark.php is exploited through an sql injection attack, which can be launched remotely. The argument "mark" is manipulated to execute malicious SQL queries and potentially gain unauthorized access to sensitive data. The vulnerability has been publicly disclosed, increasing the risk of exploitation. The associated identifier for this vulnerability is VDB-264535.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.