CVE-2023-38054

概要

参考情報

• alextselegidis/easyappointments · Product

easyappointments のその他の脆弱性

• CVE-2024-57602緊急 9.8An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.
• CVE-2024-57601中 6.1Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the le…
• CVE-2023-3290中 5.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results …
• CVE-2023-3289中 6.5A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This r…
• CVE-2023-3288高 8.8A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in p…