CVE-2024-2154

A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_product.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-255586 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/vanitashtml/CVE-Dumps/blob/main/Unauthenticated%20SQL%20Injection%20-%20Mobile%20Management%20Store.mdExploit
• https://vuldb.com/?ctiid.255586Permissions Required
• https://vuldb.com/?id.255586Third Party Advisory
• https://github.com/vanitashtml/CVE-Dumps/blob/main/Unauthenticated%20SQL%20Injection%20-%20Mobile%20Management%20Store.mdExploit
• https://vuldb.com/?ctiid.255586Permissions Required
• https://vuldb.com/?id.255586Third Party Advisory

Published

Mar 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21534All versions of the package jsonpath-plus are vulnerable to …9.8
• CVE-2024-21535Versions of the package markdown-to-jsx before 7.4.0 are vul…6.1
• CVE-2024-21536Versions of the package http-proxy-middleware before 2.0.7, …7.5
• CVE-2024-21537Versions of the package lilconfig from 3.1.0 and before 3.1.…8.9
• CVE-2024-21538Versions of the package cross-spawn before 6.0.6, from 7.0.0…7.7
• CVE-2024-21539Versions of the package @eslint/plugin-kit before 0.2.3 are …7.7
• CVE-2024-21540Rejected reason: This issue is not a vulnerability because n…
• CVE-2024-21541Versions of the package dom-iterator before 1.0.1 are vulner…9.8
• CVE-2024-21542Versions of the package luigi before 3.6.0 are vulnerable to…8.6
• CVE-2024-21543Versions of the package djoser before 2.3.0 are vulnerable t…7.1
• CVE-2024-21544Versions of the package spatie/browsershot before 5.0.1 are …8.6
• CVE-2024-21545Proxmox Virtual Environment is an open-source server managem…8.2