<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: online dj management system project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-2372: A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management Sy</title><link>https://patchthecve.com/cve/CVE-2023-2372.html</link><guid>https://patchthecve.com/cve/CVE-2023-2372.html</guid><pubDate>Wed, 17 Jun 2026 05:52:24 +0000</pubDate><description>LOW 2.4: A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown functionality of the file classes/Master.php?f=save_event. The manipulation of the argument name leads to cross site scripting. The attack ma</description></item><item><title>CVE-2023-2371: A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2023-2371.html</link><guid>https://patchthecve.com/cve/CVE-2023-2371.html</guid><pubDate>Wed, 17 Jun 2026 05:52:24 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injecti</description></item><item><title>CVE-2023-2370: A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2023-2370.html</link><guid>https://patchthecve.com/cve/CVE-2023-2370.html</guid><pubDate>Wed, 17 Jun 2026 05:52:24 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manage_event.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to lau</description></item></channel></rss>