Event Management System vulnerabilities

2 known vulnerabilities in Event Management System from Event Management System Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Royale Event Management System: Improper Authentication

  CVE-2022-1101Jan 7, 2023SourceCodesterEPSS 1.1%

  A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royal_event/userregister.php. The manipulation leads to improper authentication. The attack m

• 7.2 High severity

  Event Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-38323Sep 15, 2022Event Management System ProjectEPSS 1.3%

  Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.