CVE-2018-12625

CVE-2018-12625 affects Eventum 3.5.0, with an XSS vulnerability in /htdocs/validate.php via the values parameter. The connected sources corroborate a client-side data validation issue in Eventum 3.5.0; no further exploit details are provided in the provided documents. The NVD entry lists a CVSS v...

CVE-2018-12623

An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the currentpage parameter...

CVE-2018-12623

Eventum 3.5.0 is affected by a cross-site scripting (XSS) vulnerability in htdocs/switch.php via the current_page parameter. Public sources (NVD) describe the issue and assign CVE-2018-12623 with a CVSS v2 base score of 4.3 (medium) and CVSS v3 base score of 6.1 (medium); attack requires no user ...

CVE-2018-12622

An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the fieldname parameter...

CVE-2018-12622

Eventum 3.5.0 is affected by an XSS in htdocs/ajax/update.php via the field_name parameter. The issue is reflected XSS with potential impact on confidentiality/integrity (per CVSSv3 6.1, MEDIUM). No exploit details or patch version are provided in the documents; a later release 3.5.2 is reference...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

Open redirect

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

CVE-2018-12621

An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the currentpage parameter...

CVE-2018-12621

CVE-2018-12621 affects Eventum 3.5.0 with an Open Redirect in /htdocs/switch.php via the current_page parameter. The issue enables redirection to arbitrary URLs. No explicit remediation or patch version is provided in the connected documents; details about exploit availability or mitigations are ...

Eventum Cross-Site Scripting Vulnerability

Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the /htdocs/postnote.php file in Eventum version 3.5.0. The vulnerability stems from a lack of proper validation of client-si...

CVE-2018-12624

An issue was discovered in Eventum 3.5.0. /htdocs/postnote.php has XSS via the garlicprefix parameter...

CVE-2018-12624

An issue was discovered in Eventum 3.5.0. /htdocs/postnote.php has XSS via the garlicprefix parameter...

Code injection

An issue was discovered in Eventum 3.5.0. /htdocs/postnote.php has XSS via the garlicprefix parameter...

CVE-2018-12624

An issue was discovered in Eventum 3.5.0. /htdocs/postnote.php has XSS via the garlicprefix parameter...

CVE-2018-12624

CVE-2018-12624 : An XSS vulnerability in Eventum 3.5.0 is reported in /htdocs/post_note.php via the garlic_prefix parameter. Several connected sources (NVD, Red Hat CVE entry, CNVD, OSV, CVE listings) corroborate that this is a cross-site scripting issue affecting Eventum 3.5.0 and related entrie...

Open redirect

Eventum before 3.4.0 has an open redirect vulnerability...

CVE-2018-16761

Eventum before 3.4.0 has an open redirect vulnerability...

CVE-2018-16761

Eventum before 3.4.0 has an open redirect vulnerability...

CVE-2018-16761

CVE-2018-16761 affects Eventum before 3.4.0, which contains an open redirect vulnerability. The adjacent nuclei template confirms that an attacker can redirect a user to a malicious site, potentially enabling phishing or data exposure. Remediation per sources is to upgrade to Eventum version 3.4....