CVE-2024-0279

MEDIUM

Kashipara Food Management System < 1.0 - SQL Injection via item_list_edit.php id Parameter

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is an unknown function of the file item_list_edit.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249834 is the identifier assigned to this vulnerability.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.249834
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.249834

Scores

CVSS v3 6.3
EPSS 0.0056
EPSS Percentile 42.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (1)
kashipara/food_management_system < 1.0
Published Jan 07, 2024
Tracked Since Feb 18, 2026