Eventum Project

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Eventum Project records in CISA KEV

No Eventum Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eventum 12 records MEDIUM

Records

12 records in Eventum · all components

TI-2014-01267 CVE-2014-1632 · GHSA-v636-gxjq-pvhh

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and…

MEDIUM 48

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.10488 Published 2018-01-31 No fix listed CWE-275

TI-2018-08277 CVE-2018-11569 · GHSA-3fvp-w97c-35v6

Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of…

MEDIUM 46

Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01743 Published 2019-09-05 No fix listed CWE-502

TI-2014-01266 CVE-2014-1631 · GHSA-g9hw-qpvr-4r38

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

MEDIUM 45

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09299 Published 2018-01-31 No fix listed CWE-275

TI-2018-09066 CVE-2018-12628 · GHSA-pgj8-q9w4-wp3f

An issue was discovered in Eventum 3.5.0.

LOW 39

An issue was discovered in Eventum 3.5.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00657 Published 2019-07-10 No fix listed CWE-352

TI-2018-11998 CVE-2018-16761 · GHSA-qqhx-23cg-7wxp

Eventum before 3.4.0 has an open redirect vulnerability.

LOW 32

Eventum before 3.4.0 has an open redirect vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02201 Published 2018-09-09 No fix listed CWE-601

TI-2018-09065 CVE-2018-12627 · GHSA-j6rw-2m8m-j899

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09064 CVE-2018-12626 · GHSA-9fpj-h44m-mf9w

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09063 CVE-2018-12625 · GHSA-r9vf-85j7-c8f6

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09062 CVE-2018-12624 · GHSA-2883-9xj8-6c3x

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-05-24 No fix listed CWE-79

TI-2018-09061 CVE-2018-12623 · GHSA-w25r-f7hp-79qp

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09060 CVE-2018-12622 · GHSA-2835-wpx9-j9cq

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09059 CVE-2018-12621 · GHSA-hw32-h72w-xcx4

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00906 Published 2019-07-05 No fix listed CWE-601

Open these records in search →

Critical	1
High	3
Medium	8
Low	0
No CVSS	0