CVE-2023-2371

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227647.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Online DJ Management System	1.0

References

https://github.com/yoyoyoyoyohane/bug_report/blob/main/SQLi-1.mdExploit
https://vuldb.com/?ctiid.227647Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.227647Third Party Advisory, VDB Entry
https://github.com/yoyoyoyoyohane/bug_report/blob/main/SQLi-1.mdExploit
https://vuldb.com/?ctiid.227647Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.227647Third Party Advisory, VDB Entry

Timeline

Published: Apr 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-237104.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, CVE-2023-237114.3Cross-Site Request Forgery (CSRF) vulnerability in A2 Hosting A2 Optimized WP plugin <= 3.0.4 versions.CVE-2023-237128.8Cross-Site Request Forgery (CSRF) vulnerability in User Meta Manager plugin <= 3.4.9 versions.CVE-2023-237138.8Cross-Site Request Forgery (CSRF) vulnerability in Manoj Thulasidas Theme Tweaker plugin <= 5.20 versions.CVE-2023-237148.8Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash plugin <= 3.6.4.1 versions.CVE-2023-237158.8Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured A CVE-2023-237164.3Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Securit CVE-2023-237175.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in George Gecewicz Portfolio Slideshow plugin <= 1.13.0 versions.CVE-2023-237184.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Esstat17 Page Loading Effects plugin <= 2.0.0 versions.CVE-2023-237198.8Cross-Site Request Forgery (CSRF) vulnerability in Premmerce plugin <= 1.3.17 versions.CVE-2023-23724.8A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this iss CVE-2023-237204.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NetReviews SAS Verified Reviews (Avis Vérifiés) plugin <= 2.3.13 versions.