CVE-2018-13060

概要

参考情報

• sysdream.com/news/lab · Third Party Advisory
• sysdream.com/news/lab/2019-10-25-cve-2018-13060-easy-appointments-captcha-bypass · Third Party Advisory

easy!appointments のその他の脆弱性

• CVE-2026-23622高 8.8Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EA_Security.php::csrf_verify() only enforce…
• CVE-2025-50383高 8.1alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.
• CVE-2025-29448高 7.5Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, caus…
• CVE-2025-31828高 8.8Cross-Site Request Forgery (CSRF) vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This …
• CVE-2023-32295中 6.3Missing Authorization vulnerability in Alex Tselegidis Easy!Appointments.This issue affects Easy!Appointments: from n/a through 1.3.3.