CVE-2014-1632: Eventum Project Eventum

High severity, CVSS 8.1. EPSS: 10.5% chance of exploitation in the next 30 days.

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

Affected products

• Eventum Project Eventum: before 2.3.5 (fixed in 2.3.5)

Published 2018-01-31. Last modified 2026-06-17.