CVE-2024-2148

A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255501 was assigned to this vulnerability.

• CWE-434

• https://github.com/vanitashtml/CVE-Dumps/blob/main/RCE%20via%20Arbitrary%20File%20Upload%20in%20Mobile%20Management%20Store.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.255501Permissions Required, VDB Entry
• https://vuldb.com/?id.255501Third Party Advisory, VDB Entry
• https://github.com/vanitashtml/CVE-Dumps/blob/main/RCE%20via%20Arbitrary%20File%20Upload%20in%20Mobile%20Management%20Store.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.255501Permissions Required, VDB Entry
• https://vuldb.com/?id.255501Third Party Advisory, VDB Entry

Published

Mar 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21474Memory corruption when size of buffer from previous call is …7.8
• CVE-2024-21475Memory corruption when the payload received from firmware is…7.8
• CVE-2024-21476Memory corruption when the channel ID passed by user is not …7.8
• CVE-2024-21477Transient DOS while parsing a protected 802.11az Fine Time M…7.5
• CVE-2024-21478transient DOS when setting up a fence callback to free a KGS…5.5
• CVE-2024-21479Transient DOS during music playback of ALAC content.7.5
• CVE-2024-21480Memory corruption while playing audio file having large-size…9.8
• CVE-2024-21481Memory corruption when preparing a shared memory notificatio…8.4
• CVE-2024-21482Memory corruption during the secure boot process, when the `…7.8
• CVE-2024-21483A vulnerability has been identified in SENTRON 7KM PAC3120 A…5.1
• CVE-2024-21484Versions of the package jsrsasign before 11.0.0 are vulnerab…5.9
• CVE-2024-21485Versions of the package dash-core-components before 2.13.0; …5.4