Event Management System (Sourcecodehero) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-05. Vendor: Sourcecodehero.

CVEs of Event Management System

• CVE-2024-44728 - CVSS 7.6 (high), 2024-09-05: Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in…
• CVE-2024-44727 - CVSS 9.8 (critical), 2024-09-05: Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.