CVE-2024-2718

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/booking-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257471.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%207.pdfExploit
• https://vuldb.com/?ctiid.257471Permissions Required, VDB Entry
• https://vuldb.com/?id.257471Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%207.pdfExploit
• https://vuldb.com/?ctiid.257471Permissions Required, VDB Entry
• https://vuldb.com/?id.257471Third Party Advisory, VDB Entry

Published

Mar 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27174Remote Command program allows an attacker to get Remote Code…9.8
• CVE-2024-27175Remote Command program allows an attacker to read any file u…4.4
• CVE-2024-27176An attacker can get Remote Code Execution by overwriting fil…7.2
• CVE-2024-27177An attacker can get Remote Code Execution by overwriting fil…7.2
• CVE-2024-27178An attacker can get Remote Code Execution by overwriting fil…7.2
• CVE-2024-27179Admin cookies are written in clear-text in logs. An attacker…4.7
• CVE-2024-27180An attacker with admin access can install rogue applications…6.7
• CVE-2024-27181In Apache Linkis <= 1.5.0, Privilege Escalation in Basic ma…8.8
• CVE-2024-27182In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic…4.9
• CVE-2024-27183XSS vulnerability in DJ-HelpfulArticles component for Jooml…6.1
• CVE-2024-27184Inadequate validation of URLs could result into an invalid c…6.1
• CVE-2024-27185The pagination class includes arbitrary parameters in links,…9.1