Eventum
14 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Eventum, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.
Eventum CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 14 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High3
- Medium10
Latest CVEs
The 14 most recently published vulnerabilities affecting Eventum.
- CVE-2018-11569Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.9.8
- CVE-2018-12628An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.8.8
- CVE-2018-12627An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.6.1
- CVE-2018-12626An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.6.1
- CVE-2018-12625An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.6.1
- CVE-2018-12623An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.6.1
- CVE-2018-12622An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.6.1
- CVE-2018-12621An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.6.1
- CVE-2018-12624An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.6.1
- CVE-2018-16761Eventum before 3.4.0 has an open redirect vulnerability.6.1
- CVE-2014-1632htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.8.1
- CVE-2014-1631Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.7.5
- CVE-2005-2468Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.a...6.4
- CVE-2005-2467Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) releas...5.8
Product grouping is registry-driven, with AI assist and human review. How it works