CVE-2023-3289

概要

参考情報

• alextselegidis/easyappointments · Product

easyappointments のその他の脆弱性

• CVE-2024-57602緊急 9.8An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.
• CVE-2024-57601中 6.1Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the le…
• CVE-2023-3290中 5.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results …
• CVE-2023-3288高 8.8A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in p…
• CVE-2023-3287高 8.8A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in pr…