CVE-2024-6900

Summary

CVE-2024-6900 is a critical vulnerability affecting SourceCodester Record Management System 1.0. The issue lies in the processing of the file edit_emp.php, which is susceptible to SQL injection. An attacker can manipulate the argument id to gain unauthorized access, allowing for remote exploitation. This vulnerability, identified as VDB-271925, has been publicly disclosed and may already be in use by threat actors.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.