← All advisories

High severity8.8NVD Advisory· Published Jul 10, 2019· Updated Jun 17, 2026

CVE-2018-12628

CVE-2018-12628

Description

An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Eventum Project/Eventum
cpe:2.3:a:eventum_project:eventum:*:*:*:*:*:*:*:*
Range: <=3.5.0
Eventum/Eventumdescription
Eventum/Eventumllm-fuzzy
Range: <3.5.0

Patches

Vulnerability mechanics

References

2

github.com/eventum/eventum/blob/master/CHANGELOG.mdnvdRelease NotesThird Party Advisory
github.com/eventum/eventum/releases/tag/v3.5.2nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.