Mevin

mevin

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Basic Php Events Lister

basic-php-events-lister

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-3168 1Mevin 1Basic Php Events Lister Apr 23, 2026 Sep 11, 2009 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administ...Show more Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request.Show less
CVE-2008-6464 1Mevin 1Basic Php Events Lister Apr 23, 2026 Mar 13, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2009-3168

1Mevin

1Basic Php Events Lister

Apr 23, 2026

Sep 11, 2009

N/A· v4

7.2 HIGH· v3

6.5 MEDIUM· v2

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administ...Show more

CVE-2008-6464

1Mevin

1Basic Php Events Lister

Apr 23, 2026

Mar 13, 2009

N/A· v4

N/A· v3

7.5 HIGH· v2

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.