Event Management vulnerabilities

3 known vulnerabilities in Event Management from PuneethReddyHC. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Event Management: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-65354Dec 23, 2025PuneethReddyHC

  Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sens

• 9.8 Critical severity

  event_management: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-28322Apr 26, 2024PuneethReddyHC

  SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the event_id parameter in a crafted POST request.

• 8.8 High severity

  Event Management: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3432Apr 7, 2024PuneethReddyHC

  A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument event_id/full_name/email/mobile/college/branch leads