Webevents

webevents

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Online Event Registration

online_event_registration

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4146 1Webevents 1Webevents Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is un...Show more Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2006-6007 1Webevents 1Online Event Registration Apr 23, 2026 Nov 21, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-4146

1Webevents

Apr 23, 2026

Aug 3, 2007

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is un...Show more

CVE-2006-6007

1Webevents

1Online Event Registration

Apr 23, 2026

Nov 21, 2006

N/A· v4

N/A· v3

5.0 MEDIUM· v2

save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.