CVE-2024-1926

Summary

CVE-2024-1926 is a newly disclosed critical vulnerability affecting the SourceCodester Free and Open Source Inventory Management System version 1.0. The issue lies in the processing of the file /app/ajax/search_sales_report.php, which is susceptible to SQL injection. An attacker can manipulate the customer argument to execute malicious SQL queries, potentially gaining unauthorized access to sensitive data or taking control of the system. The vulnerability has been publicly disclosed, increasing the risk of exploitation. The identifier VDB-254861 has been assigned to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.