Permission Issues

CVE-2014-1632

High

8.1/10

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

Weaknesses in this category are related to improper assignment or handling of permissions.