SQL Injection Vulnerability in SourceCodeHero Clothes Recommendation System

CVE-2024-10337

What is CVE-2024-10337?

A critical security vulnerability has been identified in the SourceCodeHero Clothes Recommendation System version 1.0. This flaw resides in an unspecified function accessed via the URL path /admin/home.php?con=add. Attackers can exploit this vulnerability by manipulating the parameters cat, subcat, t1, t2, and text to perform SQL injection, potentially leading to unauthorized access to sensitive database information. The vulnerability is characterized by its ability to be exploited remotely, underscoring the importance of implementing security measures promptly to mitigate risks. The details of this exploit have been publicly disclosed, elevating the need for immediate action among users and administrators of the affected product.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References