CVE-2024-0270: SQL Injection vulnerability in Kashipara Food Management System up to 1.0. Exploitation allows remote attackers to manipulate the item_name argument in item_list_submit.php leading to unauthorized database access.

CVE-2024-0270 is a critical SQL injection flaw in Kashipara Food Management System version 1.0, allowing remote attackers to execute arbitrary SQL commands. The vulnerability resides in the 'item_list_submit.php' file, specifically through the 'item_name' parameter, posing a significant security risk. With a SOCRadar Vulnerability Risk Score (SVRS) of 61, while not critical (above 80), this publicly disclosed exploit still requires prompt attention to prevent potential data breaches. Successful exploitation could lead to complete database compromise, impacting data confidentiality, integrity, and availability. The CWE-89 classification highlights the standard SQL injection nature of this threat.