Vulnerabilities

Filters

1 selected

12 records

Sort

Vendor: Eventum Project Clear all filters

TI-2018-08277 CVE-2018-11569 · GHSA-3fvp-w97c-35v6

Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of…

MEDIUM 46

Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01743 Published 2019-09-05 No fix listed CWE-502

TI-2018-09066 CVE-2018-12628 · GHSA-pgj8-q9w4-wp3f

An issue was discovered in Eventum 3.5.0.

LOW 39

An issue was discovered in Eventum 3.5.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00657 Published 2019-07-10 No fix listed CWE-352

TI-2018-09065 CVE-2018-12627 · GHSA-j6rw-2m8m-j899

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09064 CVE-2018-12626 · GHSA-9fpj-h44m-mf9w

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09063 CVE-2018-12625 · GHSA-r9vf-85j7-c8f6

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09061 CVE-2018-12623 · GHSA-w25r-f7hp-79qp

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09060 CVE-2018-12622 · GHSA-2835-wpx9-j9cq

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-07-10 No fix listed CWE-79

TI-2018-09059 CVE-2018-12621 · GHSA-hw32-h72w-xcx4

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00906 Published 2019-07-05 No fix listed CWE-601

TI-2018-09062 CVE-2018-12624 · GHSA-2883-9xj8-6c3x

An issue was discovered in Eventum 3.5.0.

LOW 29

An issue was discovered in Eventum 3.5.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2019-05-24 No fix listed CWE-79

TI-2018-11998 CVE-2018-16761 · GHSA-qqhx-23cg-7wxp

Eventum before 3.4.0 has an open redirect vulnerability.

LOW 32

Eventum before 3.4.0 has an open redirect vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02201 Published 2018-09-09 No fix listed CWE-601

TI-2014-01267 CVE-2014-1632 · GHSA-v636-gxjq-pvhh

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and…

MEDIUM 48

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.10488 Published 2018-01-31 No fix listed CWE-275

TI-2014-01266 CVE-2014-1631 · GHSA-g9hw-qpvr-4r38

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

MEDIUM 45

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09299 Published 2018-01-31 No fix listed CWE-275