CVE-2024-2147
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 3, 2024
Updated: Jan 2, 2025
CWE ID 787
CWE ID 20
Summary
CVE-2024-2147 is a critical vulnerability affecting the SourceCodester Online Mobile Management Store version 1.0. A security flaw in an unknown functionality of the /admin/login.php file allows for sql injection attacks. By manipulating the "username" argument, an attacker can gain unauthorized access to the system. This vulnerability can be exploited remotely, and the exploit has been disclosed to the public. The identifier for this issue is VDB-255500.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.