Mevin

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Mevin records in CISA KEV

No Mevin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Basic-php-events-lister 1 record LOW Basic Php Events Lister 1 record LOW

Records

2 records

TI-2009-03013 CVE-2009-3168 · GHSA-cr8p-vp27-f6rh

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1)…

LOW 39

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administ…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02609 Published 2009-09-11 No fix listed CWE-862

TI-2008-06154 CVE-2008-6464 · GHSA-5287-9xm8-2h7q

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0…

LOW 35

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01054 Published 2009-03-13 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0