CVE-2024-2145

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255498 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214508.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-214518.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2024-214527.5Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.CVE-2024-214537.5Transient DOS while decoding message of size that exceeds the available system memory.CVE-2024-214547.5Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.CVE-2024-214557.8Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.CVE-2024-214569.1Information Disclosure while parsing beacon frame in STA.CVE-2024-214577.5INformation disclosure while handling Multi-link IE in beacon frame.CVE-2024-214587.5Information disclosure while handling SA query action frame.CVE-2024-214597.5Information disclosure while handling beacon or probe response frame in STA.CVE-2024-21466.1A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerCVE-2024-214606.5Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.