Credit Card and Debit Card Payment SQL Injection Vulnerability

CVE-2024-33967

Summary

A critical SQL injection vulnerability exists in PayPal's credit card and debit card payment processing systems, specifically in version 1.0. This vulnerability enables attackers to craft specific SQL queries that can target the database. By exploiting this weakness, malicious actors can access sensitive data stored within the database, including personal and financial user information. The affected parameters include 'view' in 'Attendance' and 'YearLevel' within the '/AttendanceMonitoring/report/attendance_print.php' interface. Organizations using this payment system should take immediate steps to mitigate the risks associated with this vulnerability.

References