Researchers
Back
Yaroslav Babin
Researcher from
Positive Technologies
#6049
of 60,563
51.5
Total CVSS
Vulnerabilities
·
8
Medium
7
High
1
PT-2019-8912
2019-07-10
8.8
CVE-2018-12628
Eventum
Eventum
An issue was discovered that allows CSRF in the htdocs/manage/users.php file, enabling the creation of another user with admin privileges.
PT-2019-8906
2019-07-10
6.1
CVE-2018-12622
Eventum
Eventum
An issue was discovered in the software, where the `htdocs/ajax/update.php` endpoint has a cross-site scripting (XSS) vulnerability via the `field name` parameter.
PT-2019-8907
2019-07-10
6.1
CVE-2018-12623
Eventum
Eventum
An issue was discovered in the htdocs/switch.php file, where there is a cross-site scripting (XSS) vulnerability via the `current page` parameter. This allows for potential malicious script execution.
PT-2019-8910
2019-07-10
6.1
CVE-2018-12626
Eventum
Eventum
An issue was discovered in the software, where the `/htdocs/popup.php` endpoint has a cross-site scripting (XSS) vulnerability via the `cat` parameter. This allows for potential malicious script execution.
PT-2019-8911
2019-07-10
6.1
CVE-2018-12627
Eventum
Eventum
An issue was discovered in the software, where the /htdocs/list.php endpoint has a cross-site scripting (XSS) issue via the `show notification list issues` or `show authorized issues` parameters.
PT-2019-8909
2019-07-10
6.1
CVE-2018-12625
Eventum
Eventum
An issue was discovered in the software, where the `/htdocs/validate.php` endpoint has a cross-site scripting (XSS) vulnerability via the `values` parameter.
PT-2019-8905
2019-07-05
6.1
CVE-2018-12621
Eventum
Eventum
An issue was discovered in the software, where the /htdocs/switch.php file has an Open Redirect via the `current page` parameter.
PT-2019-8908
2019-05-24
6.1
CVE-2018-12624
Eventum
Eventum
An issue was discovered in the software, where the /htdocs/post note.php endpoint has a cross-site scripting (XSS) issue via the `garlic prefix` parameter.