Known Vulnerabilities for products from Eventum Project
Listed below are 12 of the newest known vulnerabilities associated with the vendor "Eventum Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-16761 json | Eventum before 3.4.0 has an open redirect vulnerability. | 6.1 - MEDIUM | 2018-09-09 | 2018-11-06 |
| CVE-2018-12628 json | An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges. | 8.8 - HIGH | 2019-07-10 | 2019-07-11 |
| CVE-2018-12627 json | An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_i... | 6.1 - MEDIUM | 2019-07-10 | 2019-07-10 |
| CVE-2018-12626 json | An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter. | 6.1 - MEDIUM | 2019-07-10 | 2019-07-10 |
| CVE-2018-12625 json | An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter. | 6.1 - MEDIUM | 2019-07-10 | 2019-07-10 |
| CVE-2018-12624 json | An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter. | 6.1 - MEDIUM | 2019-05-24 | 2019-05-28 |
| CVE-2018-12623 json | An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter. | 6.1 - MEDIUM | 2019-07-10 | 2019-07-10 |
| CVE-2018-12622 json | An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter. | 6.1 - MEDIUM | 2019-07-10 | 2019-07-10 |
| CVE-2018-12621 json | An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter. | 6.1 - MEDIUM | 2019-07-05 | 2019-07-08 |
| CVE-2018-11569 json | Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2. | 9.8 - CRITICAL | 2019-09-05 | 2019-09-06 |
| CVE-2014-1632 json | htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostn... | 8.1 - HIGH | 2018-01-31 | 2019-04-26 |
| CVE-2014-1631 json | Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php. | 7.5 - HIGH | 2018-01-31 | 2019-04-26 |
Known software with vulnerabilities from Eventum Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Eventum Project | Eventum | 1.1.0 |