Vulnerability · Published Mar 3, 2024 · Assigned by VulDB
CVE-2024-2151SourceCodester Online Mobile Management Store Product Price logic error
Medium 4.3
In plain English
A medium-severity security flaw in Online Mobile Management Store from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Official description
A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255583.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Mobile Management Store | 1.0 |
Weakness: CWE-840 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
References
- VDB-255583 | SourceCodester Online Mobile Management Store Product Price logic error vdb-entry, technical-description
- VDB-255583 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- https://github.com/vanitashtml/CVE-Dumps/blob/main/Business%20Logic%20in%20Mobile%20Management%20Store.md exploit