[SA16255] MySQL Eventum PEAR XML_RPC PHP Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

MySQL Eventum index.php email Parameter XSS

The MySQL Eventum install hosted on the remote web server is vulnerable to a cross-site scripting attack because it fails to sanitize user-supplied input to the 'email' parameter of the 'index.php' script before using it to generate dynamic HTML output. With a specially crafted URL, an attacker c...

[SA13677] MySQL Eventum Multiple Vulnerabilities

TITLE: MySQL Eventum Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13677 VERIFY ADVISORY: http://secunia.com/advisories/13677/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: MySQL Eventum 1.x http://secunia.com/product/4464/ DESCRIPTION:...