7.9 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.6%
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.
bazaar.launchpad.net/~eventum-developers/eventum/trunk/revision/4665
www.securityfocus.com/archive/1/530891/100/0/threaded
bugs.launchpad.net/eventum/+bug/1271499
www.htbridge.com/advisory/HTB23198