Filtered by vendor Mevin Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-6464 1 Mevin 1 Basic-php-events-lister 2024-08-07 N/A
SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2009-3168 1 Mevin 1 Basic Php Events Lister 2024-08-07 N/A
Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request.