eventum-project

Top products

The 12 most recently published vulnerabilities affecting eventum-project.

• CVE-2018-11569Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.9.8Sep 5, 2019
• CVE-2018-12628An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.8.8Jul 10, 2019
• CVE-2018-12627An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.6.1Jul 10, 2019
• CVE-2018-12626An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.6.1Jul 10, 2019
• CVE-2018-12625An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.6.1Jul 10, 2019
• CVE-2018-12623An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.6.1Jul 10, 2019
• CVE-2018-12622An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.6.1Jul 10, 2019
• CVE-2018-12621An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.6.1Jul 5, 2019
• CVE-2018-12624An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.6.1May 24, 2019
• CVE-2018-16761Eventum before 3.4.0 has an open redirect vulnerability.6.1Sep 9, 2018
• CVE-2014-1632htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.8.1Jan 31, 2018
• CVE-2014-1631Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.7.5Jan 31, 2018