CVE-2024-9359

Summary

CVE-2024-9359 is a newly disclosed critical vulnerability affecting the code-projects Restaurant Reservation System 1.0. This issue lies within an unspecified functionality of the file /addcompany.php, which is susceptible to SQL injection. Malicious actors can exploit this vulnerability by manipulating the argument "company," allowing them to execute malicious SQL commands. The attack can be carried out remotely, increasing the threat potential. The exploit for this vulnerability has been made public, making it imperative for users to apply the necessary patches or updates as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.