CVE-2024-7897

Summary

CVE-2024-7897 is a newly disclosed critical vulnerability affecting Tosei Online Store Management System versions 4.02, 4.03, and 4.04. The issue lies in an unspecified part of the /cgi-bin/tosei_kikai.php file, which can be exploited through manipulation of the argument "kikaibangou." This leads to command injection, allowing attackers to execute arbitrary commands remotely. The vulnerability has been publicly disclosed, and exploits are available. Unfortunately, the vendor has not responded to earlier notifications about this disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.