← Back

Event Management System

event_management_system

Vendor: Angeljudesuarez • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-44728
1Angeljudesuarez
1Event Management System
Sep 6, 2024
Sep 5, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.
CVE-2024-44727
1Angeljudesuarez
1Event Management System
Sep 6, 2024
Sep 5, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.