CVE-2024-2151

CVE-2024-2151 affects SourceCodester Online Mobile Management Store 1.0, specifically the Product Price Handler where the quantity argument can be set to -1, leading to business-logic errors. The attack is remote and exploits have been disclosed publicly. The connected documents confirm the issue...

CVE-2024-2332

CVE-2024-2332 concerns SourceCodester Online Mobile Management Store 1.0. The vulnerability affects the HTTP GET Request Handler used by the /admin/maintenance/manage_category.php file, where manipulation of the argument id leads to SQL injection. Multiple connected records corroborate remote exp...

CVE-2024-2147

SourceCodester Online Mobile Management Store 1.0 has a SQL injection in /admin/login.php caused by manipulating the username parameter. Descriptions from NVD/Red Hat and related feeds mark it as critical with remote exploitation and public disclosure (VDB-255500). No patch/version fix details ar...

CVE-2024-2146

Summary (CVE-2024-2146) : SourceCodester Online Mobile Management Store 1.0 has a cross-site scripting vulnerability in the vulnerable endpoint “/?p=products”, triggered by manipulating the search argument. The vulnerability is remote-exploitable and the exploit has been disclosed publicly. Root ...

CVE-2024-2148

CVE-2024-2148 affects SourceCodester Online Mobile Management Store 1.0. The vulnerability is in the file /classes/Users.php, where manipulating the img argument enables unrestricted file upload. This claim is supported by multiple sources in the connected data and indicates a remote attack surfa...

CVE-2024-2153

CVE-2024-2153 affects SourceCodester Online Mobile Management Store 1.0, with SQL injection in the /admin/orders/view_order.php file caused by manipulation of the id parameter. Exploitation appears possible remotely and public disclosure exists (VDB-255585). Public-available sources describe the ...

CVE-2024-2154

CVE-2024-2154 affects SourceCodester Online Mobile Management Store 1.0, specifically the view_product.php file where the id parameter enables SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly (VDB-255586); impact is high for confidentiality, integrity, and ...

CVE-2024-2145

CVE-2024-2145 affects SourceCodester Online Mobile Management Store 1.0. The vulnerability is a Cross-Site Scripting issue in an unknown function of /endpoint/update-tracker.php, triggered by manipulating the firstname parameter. It can be exploited remotely, and the exploit has been disclosed pu...

CVE-2024-2152

CVE-2024-2152 affects SourceCodester Online Mobile Management Store 1.0. The vulnerability is an SQL injection in /admin/product/manage_product.php caused by improper handling of the id parameter, which can be exploited remotely. The issue is widely reported as critical with public exploit disclo...