CVE-2018-12622

An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the fieldname parameter...

CVE-2018-16761

Eventum before 3.4.0 has an open redirect vulnerability...

Design/Logic Flaw

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php...