CVE-2024-2145

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255498 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/vanitashtml/CVE-Dumps/blob/main/Stored%20XSS%20Mobile%20Management%20Store.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.255498Permissions Required
• https://vuldb.com/?id.255498Third Party Advisory, VDB Entry
• https://github.com/vanitashtml/CVE-Dumps/blob/main/Stored%20XSS%20Mobile%20Management%20Store.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.255498Permissions Required
• https://vuldb.com/?id.255498Third Party Advisory, VDB Entry

Published

Mar 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21444Microsoft WDAC OLE DB provider for SQL Server Remote Code Ex…8.8
• CVE-2024-21445Windows USB Print Driver Elevation of Privilege Vulnerabilit…7
• CVE-2024-21446NTFS Elevation of Privilege Vulnerability7.8
• CVE-2024-21447Windows Authentication Elevation of Privilege Vulnerability7.8
• CVE-2024-21448Microsoft Teams for Android Information Disclosure Vulnerabi…5
• CVE-2024-21449SQL Server Native Client OLE DB Provider Remote Code Executi…8.8
• CVE-2024-21450Microsoft WDAC OLE DB provider for SQL Server Remote Code Ex…8.8
• CVE-2024-21451Microsoft ODBC Driver Remote Code Execution Vulnerability8.8
• CVE-2024-21452Transient DOS while decoding an ASN.1 OER message containing…7.5
• CVE-2024-21453Transient DOS while decoding message of size that exceeds th…7.5
• CVE-2024-21454Transient DOS while decoding the ToBeSignedMessage in Automo…7.5
• CVE-2024-21455Memory corruption when a compat IOCTL call is followed by an…7.8