CVE-2024-2719: Campcodes Complete Online DJ Booking System admin-profile.php cross site scripting
First published: Wed Mar 20 2024(Updated: )
A vulnerability classified as problematic has been found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257472.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online DJ Booking Management System | =1.0 | |
| Online DJ Booking Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2719?
CVE-2024-2719 is classified as a problematic vulnerability due to its potential for cross-site scripting.
How do I fix CVE-2024-2719?
To mitigate CVE-2024-2719, sanitize user inputs in the /admin/admin-profile.php file to prevent cross-site scripting.
What type of vulnerability is CVE-2024-2719?
CVE-2024-2719 is a cross-site scripting (XSS) vulnerability affecting the admin profile functionality of the system.
Which software versions are affected by CVE-2024-2719?
CVE-2024-2719 affects Campcodes Complete Online DJ Booking System version 1.0.
What is the impact of CVE-2024-2719?
The impact of CVE-2024-2719 allows attackers to execute malicious scripts in the context of the affected user's session.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/severity
- agent/last-modified-date
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/guess-ai
- vendor/campcodes
- canonical/online dj booking management system
- version/online dj booking management system/1.0