Lucene search

Event Management System Security Vulnerabilities

cve

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.

9.8CVSS

8.1AI Score

0.001EPSS

2024-09-05 05:15 PM

cve

CVE-2024-44728

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.

6.1CVSS

6.3AI Score

0.0005EPSS

2024-09-05 05:15 PM