Vulnerabilities

TI-2009-03013 CVE-2009-3168 · GHSA-cr8p-vp27-f6rh

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1)…

LOW 39

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administ…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02609 Published 2009-09-11 No fix listed CWE-862

TI-2008-06154 CVE-2008-6464 · GHSA-5287-9xm8-2h7q

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0…

LOW 35

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01054 Published 2009-03-13 No fix listed CWE-89

Vulnerabilities

Filters

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1)…

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0…