Eventum - Insecure File Permissions

source: https://www.securityfocus.com/bid/65186/info Eventum is prone to an insecure file-permission vulnerability. An attacker can exploit this issue to reinstall vulnerable application. This may aid in further attacks. Eventum 2.3.4 is vulnerable; other versions may also be affected. Following...

Multiple Vulnerabilities in Eventum

High-Tech Bridge Security Research Lab discovered vulnerability in Eventum, which can be exploited to reinstall and compromise vulnerable application. 1 Incorrect Default Permissions in Eventum: CVE-2014-1631 The vulnerability exists due to incorrect default permission set for installation script...

MySQL Eventum < 2.3.1 Multiple HTML Injection Vulnerabilities

Binary data 5798.prm...

MySQL Eventum Detection

The remote host is running MySQL Eventum, an open source web-based issue tracking system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52053; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

MySQL Eventum forgot_password.php XSS

The version of the MySQL Eventum installed on the remote host is affected by a cross-site scripting vulnerability because the 'forgotpassword.php' script does not properly sanitize user input before returning it as part of the HTML response. Note, several other cross-site scripting vulnerabilitie...

Eventum 2.3.1 Stored Cross Site Scripting

Exploit Title: Eventum 2.3.1 stored XSS Date: 19-2-2011 Author: Saif El-Sherei Software Link: download link if available Version: Eventum 2.3.1 Tested on: FF 3.0.15, IE 8 Vendor notification: vendor notified, awaiting response Info: Eventum is a user-friendly and flexible issue tracking system th...

Eventum Issue Tracking System 2.3.1 stored XSS

Exploit for php platform in category web applications Exploit Title: Eventum 2.3.1 stored XSS Date: 19-2-2011 Author: Saif El-Sherei Software Link: https://code.launchpad.net/eventum Version: Eventum 2.3.1 Tested on: FF 3.0.15, IE 8 Vendor notification: vendor notified, awaiting response Info:...

Eventum Issue Tracking System 2.3.1 stored cross site scripting vulnerability-vulnerability warning-the black bar safety net

Eventum Issue Tracking System is a user-friendly interface and flexible bug tracking system, it can help the development team to quickly organize tasks and bugs. Eventum Issue Tracking System 2.3.1 the presence of the stored cross site scripting vulnerability that could cause users to...

eventum issue tracking system 2.3.1 - Persistent Cross-Site Scripting

Exploit Title: Eventum 2.3.1 stored XSS Date: 19-2-2011 Author: Saif El-Sherei Software Link: https://code.launchpad.net/eventum Version: Eventum 2.3.1 Tested on: FF 3.0.15, IE 8 Vendor notification: vendor notified, awaiting response Info: Eventum is a user-friendly and flexible issue tracking...

eventum issue tracking system 2.3.1 - Persistent Cross-Site Scripting

eventum issue tracking system 2.3.1 - Persistent Cross-Site Scripting Exploit Title: Eventum 2.3.1 stored XSS Date: 19-2-2011 Author: Saif El-Sherei Software Link: https://code.launchpad.net/eventum Version: Eventum 2.3.1 Tested on: FF 3.0.15, IE 8 Vendor notification: vendor notified, awaiting...

Oracle MySQL Eventum Multiple Cross Site Scripting Vulnerabilities

Oracle MySQL Eventum is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Eventum 2.3 Cross Site Scripting

Oracle MySQL Eventum 2.3 Remote Script Insertion Vulnerabilities Vendor: MySQL AB / Oracle Corporation Product web page: http://forge.mysql.com/wiki/Eventum Affected version: 2.2 and 2.3 Summary: Eventum is a user-friendly and flexible issue tracking system that can be used by a support departmen...

Oracle MySQL Eventum 2.3 Remote Script Insertion Vulnerabilities

Summary Eventum is a user-friendly and flexible issue tracking system that can be used by a support department to track incoming technical support requests, or by a software development team to quickly organize tasks and bugs. Description Eventum suffers from a cross-site scripting vulnerability...

CVE-2005-2467

Multiple cross-site scripting XSS vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to view.php, 2 release parameter to list.php, or 3 F parameter to getjsrsdata.php...

CVE-2005-2468

Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 isCorrectPassword or 2 userExist function in class.auth.php, getCustomFieldReport function in 4 customfields.php, 5 customfieldsgraph.php, or 6...

CVE-2005-2468

The CVE-2005-2468 entry describes multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier that allow remote attackers to execute arbitrary SQL commands. Affected functions include isCorrectPassword and userExist in class.auth.php, getCustomFieldReport in custom_fields.php, (5) c...

CVE-2005-2467

CVE-2005-2467 describes multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier . The flaws allow remote attackers to inject arbitrary web script or HTML via parameters: (1) the id parameter to view.php , (2) the release parameter to list.php , or (3) the F paramete...

CVE-2005-2468

Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 isCorrectPassword or 2 userExist function in class.auth.php, getCustomFieldReport function in 4 customfields.php, 5 customfieldsgraph.php, or 6...

CVE-2005-2467

Multiple cross-site scripting XSS vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to view.php, 2 release parameter to list.php, or 3 F parameter to getjsrsdata.php...

MySQL Eventum Multiple flaws

The remote host seems to be running MySQL Eventum, a user-friendly and flexible issue tracking system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through multiple scripts. With a specially crafted URL, an attacker can use the remote server to...