PT-2026-41545

Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myevents id parameter. Attackers can send GET requests to the event add.php page with malicious myevents id values to extrac...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738

Zenbership v107 is affected by a CSRF vulnerability located at admin/cp-functions/event-add.php. The description explicitly states CSRF via that endpoint, indicating potential unauthorized operations could be triggered by attackers. No concrete patch/version remediation details are provided in th...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738: Cross-Site Request Forgery (CSRF)

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

PT-2019-7537

Name of the Vulnerable Software and Affected Versions Zenbership version 1.07 Description The issue allows for CSRF via the "admin/cp-functions/event-add.php" API endpoint. Recommendations For Zenbership version 1.07, update to a version that includes a fix for this issue, or as a temporary...

PT-2017-15144

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code. Specifically, it involves the event title parameter in the "admin/event...