CVE-2024-7287

Summary

CVE-2024-7287 is a newly disclosed critical vulnerability affecting the SourceCodester Establishment Billing Management System version 1.0. The issue lies within an unknown function of the file /manage_user.php, which can be exploited through SQL injection by manipulating the argument id. The vulnerability is remotely exploitable, meaning an attacker can target the system from outside the network. As the exploit has been made public, it is advised that users of this software upgrade to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.