CVE Tools
Track your stack

Eventum-project

9 CVEs tracked since 2018. Since Jan 2018, none of them reached CISA KEV.

Eventum-project CVEs per month

Jan 2018 to Jul 2019. Point at a month, or focus the strip and use the arrow keys.
Eventum-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2018-0120
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-0770

Products

The products that kept showing up in Eventum-project's monthly top three, with their CVEs summed over those months.

  1. Eventum92 months

Latest CVEs

The 12 most recently published vulnerabilities affecting Eventum-project.

  1. CVE-2018-11569Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.9.8
  2. CVE-2018-12628An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.8.8
  3. CVE-2018-12627An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.6.1
  4. CVE-2018-12626An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.6.1
  5. CVE-2018-12625An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.6.1
  6. CVE-2018-12623An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.6.1
  7. CVE-2018-12622An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.6.1
  8. CVE-2018-12621An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.6.1
  9. CVE-2018-12624An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.6.1
  10. CVE-2018-16761Eventum before 3.4.0 has an open redirect vulnerability.6.1
  11. CVE-2014-1632htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.8.1
  12. CVE-2014-1631Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.7.5

The record

Peak rank
#66 in Jul 2019
Busiest month shown
Jul 2019, 7 CVEs
Months with a KEV entry
0 since Jan 2018
Monthly snapshots
2 since 2018
Eventum-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store