CVE-2024-4795

Summary

CVE-2024-4795 is a newly disclosed critical vulnerability affecting the Campcodes Online Laundry Management System version 1.0. The issue lies in an unknown functionality of the file /manage_user.php, which can be exploited through SQL injection by manipulating the 'id' argument. This vulnerability allows remote attackers to execute arbitrary SQL statements, potentially leading to unauthorized access, data theft, or system compromise. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. Vulnerability database identifier VDB-263894 has been assigned to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.