CVE-2024-8710

Summary

CVE-2024-8710 is a critical vulnerability found in the Inventory Management 1.0 application, specifically affecting the Products Table Page functionality located in the /model/viewProduct.php file. This vulnerability allows for SQL injection attacks through manipulation of the 'id' argument, which can be exploited remotely by attackers. The risk level has been assessed with a base score of 6.3, indicating medium severity, and it requires low privileges to exploit without user interaction. To mitigate this vulnerability, organizations should apply patches or updates provided by the vendor and implement input validation to safeguard against SQL injection attacks. If left unremediated, this vulnerability could compromise the integrity and confidentiality of sensitive data within affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.