CVE-2024-0280

Summary

CVE-2024-0280 is a newly disclosed critical vulnerability affecting the Kashipara Food Management System up to version 1.0. The issue lies in an unknown functionality of the file item_type_submit.php, which can be exploited through sql injection by manipulating the argument type_name. This vulnerability allows remote attacks, and the exploit has already been made public, posing a significant risk to organizations using the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.