CVE-2018-16761

CVE-2018-16761 affects Eventum before 3.4.0, which contains an open redirect vulnerability. The adjacent nuclei template confirms that an attacker can redirect a user to a malicious site, potentially enabling phishing or data exposure. Remediation per sources is to upgrade to Eventum version 3.4....

CVE-2014-1631

CVE-2014-1631 affects Eventum prior to 2.3.5. The root cause is incorrect default permissions in the installation workflow (setup/index.php) allowing remote reinstall, paired with potential code injection through /config/config.php during setup. Affected versions include Eventum 2.3.4 (and earlie...

CVE-2014-1632

CVE-2014-1632 : In Eventum, vulnerable up to version 2.3.4, the installation script/config handling allows remote code execution via the hostname parameter in /config/config.php during setup. The underlying issue is code injection due to insufficient input sanitization, enabling an attacker with ...