CVE-2012-1124: Phxeventmanager Project Phxeventmanager

Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.

Affected products

• Phxeventmanager Project Phxeventmanager: version 2.0 only

Published 2020-02-11. Last modified 2026-06-16.