A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/view_order.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255585 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/vanitashtml/CVE-Dumps/blob/main/SQL%20Injection%20in%20View%20Order%20-%20Mobile%20Management%20Store.md | Exploit Third Party Advisory |
| https://github.com/vanitashtml/CVE-Dumps/blob/main/SQL%20Injection%20in%20View%20Order%20-%20Mobile%20Management%20Store.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.255585 | Permissions Required |
| https://vuldb.com/?ctiid.255585 | Permissions Required |
| https://vuldb.com/?id.255585 | Third Party Advisory |
| https://vuldb.com/?id.255585 | Third Party Advisory |
Configurations
History
20 Dec 2024, 19:38
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:oretnom23:online_mobile_store_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?ctiid.255585 - Permissions Required | |
| References | () https://vuldb.com/?id.255585 - Third Party Advisory | |
| References | () https://github.com/vanitashtml/CVE-Dumps/blob/main/SQL%20Injection%20in%20View%20Order%20-%20Mobile%20Management%20Store.md - Exploit, Third Party Advisory | |
| First Time |
Oretnom23 online Mobile Store Management System
Oretnom23 |
|
| CWE |
04 Mar 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-04 01:15
Updated : 2024-12-20 19:38
NVD link : CVE-2024-2153
Mitre link : CVE-2024-2153
JSON object : View
Products Affected
oretnom23
- online_mobile_store_management_system
CWE
No CWE.