Filtered by vendor Eventum Project Subscriptions
Filtered by product Eventum Subscriptions
Total 12 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-1632 1 Eventum Project 1 Eventum 2024-08-06 N/A
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.
CVE-2014-1631 1 Eventum Project 1 Eventum 2024-08-06 N/A
Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.
CVE-2018-16761 1 Eventum Project 1 Eventum 2024-08-05 N/A
Eventum before 3.4.0 has an open redirect vulnerability.
CVE-2018-12626 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.
CVE-2018-12628 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.
CVE-2018-12624 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.
CVE-2018-12627 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.
CVE-2018-12622 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.
CVE-2018-12623 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.
CVE-2018-12621 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.
CVE-2018-12625 1 Eventum Project 1 Eventum 2024-08-05 N/A
An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.
CVE-2018-11569 1 Eventum Project 1 Eventum 2024-08-05 N/A
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.