CVE-2024-2146

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255499.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Mar 3, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-214606.5Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.CVE-2024-214617.8Memory corruption while performing finish HMAC operation when context is freed by keymaster.CVE-2024-214625.5Transient DOS while loading the TA ELF file.CVE-2024-214639.8Memory corruption while processing Codec2 during v13k decoder pitch synthesis.CVE-2024-214647.8Memory corruption while processing IPA statistics, when there are no active clients registered.CVE-2024-214657.8Memory corruption while processing key blob passed by the user.CVE-2024-214667.5Information disclosure while parsing sub-IE length during new IE generation.CVE-2024-214677.5Information disclosure while handling beacon probe frame during scan entry generation in client side.CVE-2024-214687.8Memory corruption when there is failed unmap operation in GPU.CVE-2024-214697.8Memory corruption when an invoke call and a TEE call are bound for the same trusted application.CVE-2024-21479.8A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is som CVE-2024-214707.8Memory corruption while allocating memory for graphics.