CVE-2024-2154: SourceCodester Online Mobile Management Store view_product.php sql injection

Published Mar 4, 2024

Updated

A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the file viewproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-255586 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

oretnom23 Online Mobile Store Management System=1.0

Event History

Mar 4, 2024

CVE Published

via MITRE·12:31 AM

Data Sourced

via MITRE·12:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-2154?

CVE-2024-2154 is classified as a critical vulnerability.

How does CVE-2024-2154 affect the software?

CVE-2024-2154 affects the view_product.php file, allowing for SQL injection through manipulation of the 'id' argument.

Can CVE-2024-2154 be exploited remotely?

Yes, CVE-2024-2154 can be exploited remotely by an attacker.

Which version of the software is affected by CVE-2024-2154?

CVE-2024-2154 affects version 1.0 of the SourceCodester Online Mobile Management Store.

How do I fix CVE-2024-2154?

To fix CVE-2024-2154, ensure to validate and sanitize the input for the 'id' parameter in the view_product.php file.