CVE-2018-12627

An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the shownotificationlistissues or showauthorizedissues parameter...

CVE-2018-12624

An issue was discovered in Eventum 3.5.0. /htdocs/postnote.php has XSS via the garlicprefix parameter...

EUVD-2018-4579

Malware in sbrugna...

EUVD-2018-4581

Malware in sbrugna...

EUVD-2018-4580

Malware in sbrugna...

EUVD-2018-3595

Malware in sbrugna...

EUVD-2018-4584

Malware in sbrugna...

EUVD-2018-4577

Malware in sbrugna...

EUVD-2018-4582

Malware in sbrugna...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

CVE-2018-11569

Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2...

MySQL Eventum index.php email Parameter XSS

The MySQL Eventum install hosted on the remote web server is vulnerable to a cross-site scripting attack because it fails to sanitize user-supplied input to the 'email' parameter of the 'index.php' script before using it to generate dynamic HTML output. With a specially crafted URL, an attacker c...