eventum vulnerabilities and fixes

Recent CVEs affecting eventum, with upgrade or downgrade steps. 12 tracked.

eventum has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 10. Most recent: 2019-09-05. Highest priority: CVE-2014-1632 (score 62/100).

• CVE-2018-16761 MEDIUM 6.1 UPGRADE Eventum before 3.4.0 has an open redirect vulnerability.
• CVE-2018-12628 HIGH 8.8 UPGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-12627 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-12626 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-12625 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-12624 MEDIUM 6.1 DOWNGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-12623 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-12622 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-12621 MEDIUM 6.1 DOWNGRADE An issue was discovered in Eventum 3.5.0
• CVE-2018-11569 CRITICAL 9.8 UPGRADE Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data
• CVE-2014-1632 HIGH 8.1 UPGRADE htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP cod
• CVE-2014-1631 HIGH 7.5 UPGRADE Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.p

FAQ

How do I fix eventum vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is eventum being exploited right now?

None of the tracked eventum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which eventum CVE should I patch first?

CVE-2014-1632 currently ranks highest (62/100): htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP cod.

RSS feed for eventum · ← Back to latest CVEs