PatchTheCVE: eventumhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-11569: Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Datahttps://patchthecve.com/cve/CVE-2018-11569.htmlhttps://patchthecve.com/cve/CVE-2018-11569.htmlWed, 17 Jun 2026 01:36:11 +0000CRITICAL 9.8: Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.CVE-2018-12628: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12628.htmlhttps://patchthecve.com/cve/CVE-2018-12628.htmlWed, 17 Jun 2026 01:38:05 +0000HIGH 8.8: An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.CVE-2018-12627: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12627.htmlhttps://patchthecve.com/cve/CVE-2018-12627.htmlWed, 17 Jun 2026 01:38:05 +0000MEDIUM 6.1: An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.CVE-2018-12626: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12626.htmlhttps://patchthecve.com/cve/CVE-2018-12626.htmlWed, 17 Jun 2026 01:38:05 +0000MEDIUM 6.1: An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.CVE-2018-12625: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12625.htmlhttps://patchthecve.com/cve/CVE-2018-12625.htmlWed, 17 Jun 2026 01:38:04 +0000MEDIUM 6.1: An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.CVE-2018-12623: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12623.htmlhttps://patchthecve.com/cve/CVE-2018-12623.htmlWed, 17 Jun 2026 01:38:04 +0000MEDIUM 6.1: An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.CVE-2018-12622: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12622.htmlhttps://patchthecve.com/cve/CVE-2018-12622.htmlWed, 17 Jun 2026 01:38:04 +0000MEDIUM 6.1: An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.CVE-2018-12621: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12621.htmlhttps://patchthecve.com/cve/CVE-2018-12621.htmlWed, 17 Jun 2026 01:38:04 +0000MEDIUM 6.1: An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.CVE-2018-12624: An issue was discovered in Eventum 3.5.0https://patchthecve.com/cve/CVE-2018-12624.htmlhttps://patchthecve.com/cve/CVE-2018-12624.htmlWed, 17 Jun 2026 01:38:04 +0000MEDIUM 6.1: An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.CVE-2018-16761: Eventum before 3.4.0 has an open redirect vulnerability.https://patchthecve.com/cve/CVE-2018-16761.htmlhttps://patchthecve.com/cve/CVE-2018-16761.htmlWed, 17 Jun 2026 01:44:46 +0000MEDIUM 6.1: Eventum before 3.4.0 has an open redirect vulnerability.CVE-2014-1632: htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP codhttps://patchthecve.com/cve/CVE-2014-1632.htmlhttps://patchthecve.com/cve/CVE-2014-1632.htmlWed, 17 Jun 2026 00:05:18 +0000HIGH 8.1: htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.CVE-2014-1631: Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.phttps://patchthecve.com/cve/CVE-2014-1631.htmlhttps://patchthecve.com/cve/CVE-2014-1631.htmlWed, 17 Jun 2026 00:05:18 +0000HIGH 7.5: Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.