CVE-2014-1631 Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.
HighCVSS 7.5
EPSS 9.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eventum project eventum | < 2.3.5 | 2.3.5 |
References
- bazaar.launchpad.net patch third-party-advisory
- 20140127 Multiple Vulnerabilities in Eventum exploit mailing-list third-party-advisory vdb-entry
- bugs.launchpad.net exploit issue-tracking third-party-advisory
- www.htbridge.com exploit third-party-advisory