CVE-2024-2148 SourceCodester Online Mobile Management Store Users.php unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit h...

CVE-2024-2148

CVE-2024-2148 affects SourceCodester Online Mobile Management Store 1.0. The vulnerability is in the file /classes/Users.php, where manipulating the img argument enables unrestricted file upload. This claim is supported by multiple sources in the connected data and indicates a remote attack surfa...

CVE-2024-2147 SourceCodester Online Mobile Management Store login.php sql injection

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

CVE-2024-2147

SourceCodester Online Mobile Management Store 1.0 has a SQL injection in /admin/login.php caused by manipulating the username parameter. Descriptions from NVD/Red Hat and related feeds mark it as critical with remote exploitation and public disclosure (VDB-255500). No patch/version fix details ar...

CVE-2024-2147 SourceCodester Online Mobile Management Store login.php sql injection

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

CVE-2024-2146

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...

Cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...

CVE-2024-2146 SourceCodester Online Mobile Management Store ?p=products cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...

CVE-2024-2146

Summary (CVE-2024-2146) : SourceCodester Online Mobile Management Store 1.0 has a cross-site scripting vulnerability in the vulnerable endpoint “/?p=products”, triggered by manipulating the search argument. The vulnerability is remote-exploitable and the exploit has been disclosed publicly. Root ...

CVE-2024-2146 SourceCodester Online Mobile Management Store ?p=products cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...

Cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

CVE-2024-2145

CVE-2024-2145 affects SourceCodester Online Mobile Management Store 1.0. The vulnerability is a Cross-Site Scripting issue in an unknown function of /endpoint/update-tracker.php, triggered by manipulating the firstname parameter. It can be exploited remotely, and the exploit has been disclosed pu...

CVE-2024-2145 SourceCodester Online Mobile Management Store update-tracker.php cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

CVE-2024-2145 SourceCodester Online Mobile Management Store update-tracker.php cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

Online Mobile Store Management System Security Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero, an individual developer. A security vulnerability exists in version 1.0 of the Online Mobile Store Management System, which stems from an SQL injection issue in the /admin/login.php file...

PT-2024-18876 · Unknown · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file /endpoint/update-tracker.php. The manipulation of the...

Online Mobile Store Management System Code Issue Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero Personal Developer. A code issue exists in version 1.0 of the Online Mobile Store Management System that stems from an unrestricted upload issue in the /classes/Users.php file...

SourceCodester Online Mobile Management Store Cross-Site Scripting Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Online Mobile Management Store version 1.0, which stems from a cross-site scripting issue in the...

PT-2024-18933 · Sourcecodester · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /admin/product/manage product.php. The manipulation of the id argument...

Online Mobile Store Management System 跨站脚本漏洞

Online Mobile Store Management System is an online mobile store management system. A cross-site scripting vulnerability exists in Online Mobile Store Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the /?p=products file, and ca...