CVE 2014-1631

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

Related bugs and status

CVE-2014-1631 (Candidate) is related to these bugs:

Bug #1271499: Eventum Security Vulnerabilities Notification

Summary				In	Importance	Status
	1271499	Eventum Security Vulnerabilities Notification		Eventum	High	Fix Released

See the

CVE page on Mitre.org for more details.