satya-vinay Events-Management-System vulnerabilities

A security flaw was discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a involving missing authentication in multiple endpoints. The attack can be carried out remotely and the exploit is publicly available.

A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a involving SQL injection in dodelete.php of the Registration-Delete Handler component. Manipulating the ID argument enables remote attack and the exploit is publicly available.

A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a involving SQL injection in the mysqli_query function of doedit.php in the Registration-Edit Handler component. Manipulating the id/name/title/year/gender/fromdate/todate/people arguments enables remote attack and the exploit is publicly disclosed.