CVE-2024-2713

A vulnerability, which was classified as critical, was found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257466 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%202.pdfExploit
• https://vuldb.com/?ctiid.257466Permissions Required, VDB Entry
• https://vuldb.com/?id.257466Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%202.pdfExploit
• https://vuldb.com/?ctiid.257466Permissions Required, VDB Entry
• https://vuldb.com/?id.257466Third Party Advisory, VDB Entry

Published

Mar 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27124An OS command injection vulnerability has been reported to a…7.5
• CVE-2024-27125A cross-site scripting (XSS) vulnerability has been reported…4.8
• CVE-2024-27126A cross-site scripting (XSS) vulnerability has been reported…5.4
• CVE-2024-27127A double free vulnerability has been reported to affect seve…8.8
• CVE-2024-27128A buffer copy without checking size of input vulnerability h…8.8
• CVE-2024-27129A buffer copy without checking size of input vulnerability h…8.8
• CVE-2024-27130A buffer copy without checking size of input vulnerability h…8.8
• CVE-2024-27132Insufficient sanitization in MLflow leads to XSS when runnin…9.6
• CVE-2024-27133Insufficient sanitization in MLflow leads to XSS when runnin…9.6
• CVE-2024-27134Excessive directory permissions in MLflow leads to local pri…7
• CVE-2024-27135Improper input validation in the Pulsar Function Worker allo…9.9
• CVE-2024-27136XSS in Upload page in Apache JSPWiki 2.12.1 and priors allow…6.1