CVE-2014-1632
High · 8.1CVSS
8.1
EPSS
10.5%
Published
Jan 31, 2018
CISA due date
—
The record
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-49311 Permission control vulnerability in the event notification module.Impact: Successful… CWE-275
- CVE-2026-75978 A security vulnerability has been detected in xianrendzw EasyReport up to… CWE-275
- CVE-2026-19376 A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. CWE-275
- CVE-2026-12201 A flaw has been found in IObit Malware Fighter up to 13.2.0. CWE-275
- CVE-2026-41976 Permission control vulnerability in the audio framework. Impact: Successful exploitation… CWE-275
- CVE-2026-41978 Permission control vulnerability in the clone module. Impact: Successful exploitation of… CWE-275
- CVE-2026-41969 Permission control vulnerability in the projection module. Impact: Successful… CWE-275
- CVE-2026-28553 Vulnerability of improper permission control in the theme setting module. CWE-275