CVE-2024-6733: Critical SQL injection vulnerability discovered in itsourcecode Tailoring Management System 1.0. Remote attackers can exploit this flaw by manipulating the 'id/title/msg' arguments in 'templateedit.php'. This SQL injection allows unauthorized database access and manipulation.

The vulnerability poses a significant security risk, as it enables attackers to potentially steal sensitive data, modify system settings, or even gain complete control of the affected system. Although the CVSS score is 8.8, SOCRadar's Vulnerability Risk Score (SVRS) is 63, indicating a moderate risk level, but still warrants attention given that the exploit is publicly available and actively being used in the wild. Organizations using Tailoring Management System 1.0 should immediately apply appropriate patches or mitigation measures to prevent potential exploitation and data breaches.