CVE-2014-1632

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter

published January 31, 2018

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10488 · 95.7th percentile
Published
2018-01-31T18:00Z
EPSS history
Timeline
  • 31 JAN 18:00Z
    htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter
    cvelistv5