CVE-2014-1632: Undefined Security Weakness

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter...

CVE-2014-1631: Undefined Security Weakness

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php...

MySQL AB Eventum 1.x view.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issu...

MySQL AB Eventum 1.x get_jsrs_data.php F Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issu...

MySQL AB Eventum 1.x list.php release Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issu...

MySQL Eventum <= 1.5.5 (login.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; use strict; print \n; print MySQL Eventum = v1.5.5 SQL Injection PoC \n; print James Bercegay // gulftech.org // 7-28-05 \n; print \n; my $host = 'localhost'; my $path = '/eventum/login.php'; my $user = '2'; my $port = 80; my...

eventum issue tracking system 2.3.1 - Stored XSS

No description provided by source. Exploit Title: Eventum 2.3.1 stored XSS Date: 19-2-2011 Author: Saif El-Sherei Software Link: https://code.launchpad.net/eventum Version: Eventum 2.3.1 Tested on: FF 3.0.15, IE 8 Vendor notification: vendor notified, awaiting response Info: Eventum is a...

Multiple Vulnerabilities in Eventum

Advisory ID: HTB23198 Product: Eventum Vendor: Eventum Development Team Vulnerable Versions: 2.3.4 and probably prior Tested Version: 2.3.4 Advisory Publication: January 22, 2014 without technical details Vendor Notification: January 22, 2014 Vendor Patch: January 24, 2014 Public Disclosure:...

Eventum 2.3.4 Incorrect Permissions / Code Injection Vulnerabilities

Eventum version 2.3.4 suffers from incorrect default permission and code injection vulnerabilities. Vendor: Eventum Development Team Vulnerable Versions: 2.3.4 and probably prior Tested Version: 2.3.4 Advisory Publication: January 22, 2014 without technical details Vendor Notification: January 22...

Eventum 2.3.4 - hostname Remote Code Execution

Eventum 2.3.4 - hostname Remote Code Execution Advisory ID: HTB23198 Product: Eventum Vendor: Eventum Development Team Vulnerable Versions: 2.3.4 and probably prior Tested Version: 2.3.4 Advisory Publication: January 22, 2014 without technical details Vendor Notification: January 22, 2014 Vendor...

Eventum 2.3.4 - 'hostname' Remote Code Execution

Advisory ID: HTB23198 Product: Eventum Vendor: Eventum Development Team Vulnerable Versions: 2.3.4 and probably prior Tested Version: 2.3.4 Advisory Publication: January 22, 2014 without technical details Vendor Notification: January 22, 2014 Vendor Patch: January 24, 2014 Public Disclosure:...

Eventum 2.3.4 Incorrect Permissions / Code Injection

Advisory ID: HTB23198 Product: Eventum Vendor: Eventum Development Team Vulnerable Versions: 2.3.4 and probably prior Tested Version: 2.3.4 Advisory Publication: January 22, 2014 without technical details Vendor Notification: January 22, 2014 Vendor Patch: January 24, 2014 Public Disclosure:...

Eventum - Insecure File Permissions

source: https://www.securityfocus.com/bid/65186/info Eventum is prone to an insecure file-permission vulnerability. An attacker can exploit this issue to reinstall vulnerable application. This may aid in further attacks. Eventum 2.3.4 is vulnerable; other versions may also be affected. Following...

Eventum - Insecure File Permissions

Eventum - Insecure File Permissions source: https://www.securityfocus.com/bid/65186/info Eventum is prone to an insecure file-permission vulnerability. An attacker can exploit this issue to reinstall vulnerable application. This may aid in further attacks. Eventum 2.3.4 is vulnerable; other...

Multiple Vulnerabilities in Eventum

High-Tech Bridge Security Research Lab discovered vulnerability in Eventum, which can be exploited to reinstall and compromise vulnerable application. 1 Incorrect Default Permissions in Eventum: CVE-2014-1631 The vulnerability exists due to incorrect default permission set for installation script...

MySQL Eventum < 2.3.1 Multiple HTML Injection Vulnerabilities

Binary data 5798.prm...

MySQL Eventum Detection

The remote host is running MySQL Eventum, an open source web-based issue tracking system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52053; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

MySQL Eventum forgot_password.php XSS

The version of the MySQL Eventum installed on the remote host is affected by a cross-site scripting vulnerability because the 'forgotpassword.php' script does not properly sanitize user input before returning it as part of the HTML response. Note, several other cross-site scripting vulnerabilitie...

Eventum 2.3.1 Stored Cross Site Scripting

Exploit Title: Eventum 2.3.1 stored XSS Date: 19-2-2011 Author: Saif El-Sherei Software Link: download link if available Version: Eventum 2.3.1 Tested on: FF 3.0.15, IE 8 Vendor notification: vendor notified, awaiting response Info: Eventum is a user-friendly and flexible issue tracking system th...

Eventum Issue Tracking System 2.3.1 stored cross site scripting vulnerability-vulnerability warning-the black bar safety net

Eventum Issue Tracking System is a user-friendly interface and flexible bug tracking system, it can help the development team to quickly organize tasks and bugs. Eventum Issue Tracking System 2.3.1 the presence of the stored cross site scripting vulnerability that could cause users to...