CVE-2024-2148

A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit h...

Sql injection

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

CVE-2024-2148

CVE-2024-2148 affects SourceCodester Online Mobile Management Store 1.0. The vulnerability is in the file /classes/Users.php, where manipulating the img argument enables unrestricted file upload. This claim is supported by multiple sources in the connected data and indicates a remote attack surfa...

CVE-2024-2147 SourceCodester Online Mobile Management Store login.php sql injection

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

CVE-2024-2147

SourceCodester Online Mobile Management Store 1.0 has a SQL injection in /admin/login.php caused by manipulating the username parameter. Descriptions from NVD/Red Hat and related feeds mark it as critical with remote exploitation and public disclosure (VDB-255500). No patch/version fix details ar...

CVE-2024-2146

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...

Cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...

CVE-2024-2146

Summary (CVE-2024-2146) : SourceCodester Online Mobile Management Store 1.0 has a cross-site scripting vulnerability in the vulnerable endpoint “/?p=products”, triggered by manipulating the search argument. The vulnerability is remote-exploitable and the exploit has been disclosed publicly. Root ...

CVE-2024-2145 SourceCodester Online Mobile Management Store update-tracker.php cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

CVE-2024-2145

CVE-2024-2145 affects SourceCodester Online Mobile Management Store 1.0. The vulnerability is a Cross-Site Scripting issue in an unknown function of /endpoint/update-tracker.php, triggered by manipulating the firstname parameter. It can be exploited remotely, and the exploit has been disclosed pu...

CVE-2024-2145 SourceCodester Online Mobile Management Store update-tracker.php cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

CVE-2024-2145: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

Bdtask Isshue Cross-Site Scripting Vulnerability

Bdtask Isshue is a multi-store eCommerce shopping cart software from Bdtask Inc. A cross-site scripting vulnerability exists in Bdtask Isshue Multi Store eCommerce Shopping Cart Solution version 4.0, which stems from /dashboard/Cinvoice/manageinvoice containing an unknown section in the component...

CVE-2024-2147: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

CVE-2024-2148: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit h...

CVE-2024-2151: Undefined Security Weakness

A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors...

Online Mobile Store Management System Cross-site Scripting Vulnerabilities

Online Mobile Store Management System is an online mobile store management system. A cross-site scripting vulnerability exists in Online Mobile Store Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the /?p=products file, and ca...

Online Mobile Store Management System Code Issue Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero Personal Developer. A code issue exists in version 1.0 of the Online Mobile Store Management System that stems from an unrestricted upload issue in the /classes/Users.php file...

Online Mobile Store Management System Security Vulnerability

Online Mobile Store Management System is an online mobile store management system developed by Carlo Montero, an individual developer. A security vulnerability exists in Online Mobile Store Management System version 1.0, which is caused by a business logic error in the Product Price Handler group...

CVE-2024-2146: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...