Unrated severityNVD Advisory· Published Apr 28, 2023· Updated Aug 2, 2024

SourceCodester Online DJ Management System GET Parameter manage_event.php sql injection

CVE-2023-2370

Description

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manage_event.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227646 is the identifier assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Donbermoy/Online Farm Management Systemllm-fuzzy
Range: =1.0
Sourcecodester/Online Resort Management Systemcpe-rescue
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/aieouZZ/bug_report/blob/main/SQLi-1.mdmitreexploit
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000