Description

CVE-2024-6008 is a critical vulnerability in itsourcecode Online Book Store up to 1.0. It allows remote attackers to perform SQL injection attacks by manipulating the image argument in the /edit_book.php file. The vulnerability has been publicly disclosed and may be actively exploited.

Key Insights

• The SVRS of 63 indicates a moderate risk, highlighting the need for attention and timely action.
• The vulnerability allows attackers to inject malicious SQL queries, potentially leading to data theft, modification, or deletion.
• The exploit has been publicly disclosed, increasing the likelihood of exploitation by malicious actors.

Mitigation Strategies

• Update itsourcecode Online Book Store to the latest version (1.1 or later).
• Implement input validation and sanitization to prevent malicious SQL queries.
• Use a web application firewall (WAF) to block malicious requests.
• Monitor logs for suspicious activity and take appropriate action.

Additional Information

• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.
• Exploit Status: Active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning for this vulnerability.
• In the Wild: There is no evidence that this vulnerability is actively exploited in the wild.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.