CVE-2023-2370

CVE-2023-2370 affects SourceCodester Online DJ Management System 1.0, where the GET Parameter Handler in admin/events/manage_event.php is vulnerable due to improper handling of the id parameter, enabling SQL injection. The vulnerability allows remote exploitation and has been publicly disclosed. ...

CVE-2023-2372

The CVE-2023-2372 issue affects SourceCodester Online DJ Management System 1.0, specifically the file path/classes/Master.php?f=save_event endpoint. The root cause is improper handling/manipulation of the name argument, enabling cross-site scripting (XSS). Exploitation is described as remote and ...

CVE-2023-2371

CVE-2023-2371 affects SourceCodester Online DJ Management System 1.0, specifically the GET Parameter Handler in admin/inquiries/view_details.php. The vulnerability is an SQL injection caused by improper handling of the id parameter, allowing remote exploitation. Publicly disclosed exploit details...

CVE-2023-2451

Affected software: SourceCodester Online DJ Management System 1.0. Vulnerable component/file: GET Parameter Handler at /admin/bookings/view_details.php; vulnerable parameter: id. Root cause: improper handling of the id GET parameter leading to SQL injection. Impact: potential remote exploitation ...