CVE-2023-3287

Description

References

• alextselegidis/easyappointments · Product

easyappointments의 다른 취약점

• CVE-2024-57602심각 9.8An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.
• CVE-2024-57601보통 6.1Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the le…
• CVE-2023-3290보통 5.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results …
• CVE-2023-3289보통 6.5A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This r…
• CVE-2023-3288높음 8.8A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in p…