CVE-2024-2153
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 4, 2024
Updated: Dec 20, 2024
CWE ID 94
Summary
CVE-2024-2153 is a critical vulnerability affecting SourceCodester Online Mobile Management Store 1.0. The issue lies in an unknown part of the /admin/orders/view_order.php file, where manipulation of the id argument can lead to SQL injection. This vulnerability can be exploited remotely, meaning an attacker does not need to have local access to the system. The exploit for this vulnerability has been made public, increasing the risk of its use in cyber attacks. Vulnerability Database has assigned the identifier VDB-255585 to this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.