CVE-2024-2145: SourceCodester Online Mobile Management Store update-tracker.php cross site scripting
First published: Sun Mar 03 2024(Updated: )
A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255498 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Mobile Management Store | ||
| SourceCodester Online Mobile Management Store | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2145?
CVE-2024-2145 has been classified as a problematic vulnerability.
How does CVE-2024-2145 affect the software?
CVE-2024-2145 affects an unknown function in the file /endpoint/update-tracker.php, allowing for cross-site scripting through manipulation of the 'firstname' argument.
What type of vulnerability is CVE-2024-2145?
CVE-2024-2145 is classified as a cross-site scripting (XSS) vulnerability.
Is my software vulnerable if I use SourceCodester Online Mobile Management Store 1.0?
Yes, SourceCodester Online Mobile Management Store 1.0 is affected by CVE-2024-2145.
What steps should I take to mitigate CVE-2024-2145?
To mitigate CVE-2024-2145, you should implement input validation on the 'firstname' argument and sanitize user input.
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/references
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/sourcecodester
- canonical/sourcecodester online mobile management store
- vendor/oretnom23
- version/sourcecodester online mobile management store/1.0