Lucene search
Eventum ProjectEventum
2 matches found
CVE-2014-1632
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.
9.3CVSS8.2AI score0.17615EPSS
CVE-2018-11569
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.
9.8CVSS9.4AI score0.00405EPSS