GCVE - cpe:2.3:a:wende60:redaxo_cms_addon

Approved changes feed: RSS · Atom

cpe:2.3:a:wende60:redaxo_cms_addon_myevents:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wende60 (`74d7ae77-07b5-535b-aecd-2652c0aa20d6`)
Product	Redaxo Cms Addon Myevents (`15ad5a78-6f65-581c-bb46-6365b61efec2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-25319`	vulnerable	2026-06-08 05:11:29.783131	Redaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.php HIGH (7.1) Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myevents_id parameter. Attackers can send GET requests to the event_add.php page with malicious myevents_id values to extract or modify sensitive database information. Published: 2026-05-17T12:11:26.501Z Updated: 2026-05-18T10:58:34.982Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/44261 http://www.github.com/wende60/myevents https://www.vulncheck.com/advisories/redaxo-cms-addon-myevents-sql-injection-via-event-add-php	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.