CVE-2024-2154

Summary

CVE-2024-2154 is a newly disclosed critical vulnerability in SourceCodester Online Mobile Management Store 1.0. The issue lies within the file view_product.php, specifically in its handling of user input. An attacker can exploit this vulnerability by manipulating the id argument, resulting in SQL injection. This attack can be initiated remotely, allowing unauthorized access to sensitive data or even system takeover. The vulnerability has been made public, increasing the risk of exploitation. VDB-255586 is the identifier assigned to this security concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.