CVE-2024-9429

Summary

CVE-2024-9429 is a critical vulnerability identified in the Restaurant Reservation System 1.0, specifically affecting the file /filter2.php due to improper handling of user input, leading to SQL injection risks. This vulnerability allows remote attackers to manipulate the "from" and potentially "to" parameters, which can compromise the confidentiality and integrity of data. The CVSS base score for this vulnerability is 9.8, indicating high severity with a low attack complexity and no authentication required for exploitation. Organizations using this system should immediately apply patches or implement safeguards against SQL injection attacks to mitigate potential data breaches and system compromise. Public disclosure of this exploit heightens the urgency for remediation due to its possible misuse by threat actors.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.