CVE-2024-2156

Summary

CVE-2024-2156 is a newly disclosed critical vulnerability affecting the SourceCodester Best POS Management System 1.0. The issue lies within an unknown function of the file admin_class.php, where the argument img can be manipulated to execute SQL injection attacks. This vulnerability poses a significant risk as it can be exploited remotely. The exploit for this vulnerability, identified as VDB-255588, has been made public, increasing the threat level for organizations using this software. It is urged that affected organizations take immediate action to mitigate this vulnerability and update their systems as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.