CVE-2024-2145: SourceCodester Online Mobile Management Store update-tracker.php cross site scripting

Published Mar 3, 2024

Updated

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255498 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Sourcecodester Online Mobile Management Store

oretnom23 Online Mobile Store Management System=1.0

Event History

Mar 3, 2024

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

May 25, 57281

Event

via NVD·07:32 PM

Frequently Asked Questions

What is the severity of CVE-2024-2145?

CVE-2024-2145 has been classified as a problematic vulnerability.

How does CVE-2024-2145 affect the software?

CVE-2024-2145 affects an unknown function in the file /endpoint/update-tracker.php, allowing for cross-site scripting through manipulation of the 'firstname' argument.

What type of vulnerability is CVE-2024-2145?

CVE-2024-2145 is classified as a cross-site scripting (XSS) vulnerability.

Is my software vulnerable if I use SourceCodester Online Mobile Management Store 1.0?

Yes, SourceCodester Online Mobile Management Store 1.0 is affected by CVE-2024-2145.

What steps should I take to mitigate CVE-2024-2145?

To mitigate CVE-2024-2145, you should implement input validation on the 'firstname' argument and sanitize user input.