PatchTheCVEevent manager vulnerabilities and fixes
Recent CVEs affecting event manager, with upgrade or downgrade steps. 1 tracked.
Also searched as: eventmanager.
event manager has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-02. Highest priority: CVE-2018-6576 (score 66/100).
- CVE-2018-6576 CRITICAL 9.8 DOWNGRADE SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter.
FAQ
How do I fix event manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is event manager being exploited right now?
None of the tracked event manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which event manager CVE should I patch first?
CVE-2018-6576 currently ranks highest (66/100): SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter..