CVE-2024-2147

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255500.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214707.8Memory corruption while allocating memory for graphics.CVE-2024-214717.8Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.CVE-2024-214727.8Memory corruption in Kernel while handling GPU operations.CVE-2024-214739.8Memory corruption while redirecting log file to any file location with any file name.CVE-2024-214747.8Memory corruption when size of buffer from previous call is used without validation or re-initialization.CVE-2024-214757.8Memory corruption when the payload received from firmware is not as per the expected protocol size.CVE-2024-214767.8Memory corruption when the channel ID passed by user is not validated and further used.CVE-2024-214777.5Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.CVE-2024-214785.5transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.CVE-2024-214797.5Transient DOS during music playback of ALAC content.CVE-2024-21488.8A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of CVE-2024-214809.8Memory corruption while playing audio file having large-sized input buffer.
CVE-2024-2147: Critical severity, CVSS 9.8 | Vulnix