277 matches found
Privilege escalation in easyappointments
The Easy!Appointments API authorization is checked against the user's existence, without validating the permissions. As a result, a low privileged user eg. provider can create a new admin user via the "/api/v1/admins/" endpoint and take over the system. A patch is available on the develop branch ...
Easy!Appointments 安全漏洞
Easy!Appointments is a web-based appointment and schedule management system. A security vulnerability exists in versions prior to Easy!Appointments 1.5.0. An attacker exploited the vulnerability to cause an API privilege escalation...
Easy Appointments 1.4.2 - Information Disclosure Exploit
Exploit Title: Easy Appointments 1.4.2 - Information Disclosure Exploit author: noraj Alexandre ZANNI for ACCEIS https://www.acceis.fr Author website: https://pwn.by/noraj/ Exploit source: https://github.com/Acceis/exploit-CVE-2022-0482 Vendor Homepage: https://easyappointments.org/ Software Link...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Easyappointments
Easy!Appointments PII disclosure Easy!Appointments --...
Easy!Appointments < 1.4.3 - Information Disclosure Exploit
!/usr/bin/env ruby Exploit Title: Easy!Appointments 1.4.3 - Unauthenticated PII events disclosure Exploit author: noraj Alexandre ZANNI for ACCEIS https://www.acceis.fr Author website: https://pwn.by/noraj/ Exploit source: https://github.com/Acceis/exploit-CVE-2022-0482 Vendor Homepage:...
Easy!Appointments Information Disclosure
!/usr/bin/env ruby Exploit Title: Easy!Appointments 1.4.3 - Unauthenticated PII events disclosure Exploit author: noraj Alexandre ZANNI for ACCEIS https://www.acceis.fr Author website: https://pwn.by/noraj/ Exploit source: https://github.com/Acceis/exploit-CVE-2022-0482 Date: 2022-04-11 Vendor...
Easy!Appointments 安全漏洞
Easy!Appointments is a web-based appointment and schedule management system. There is a security vulnerability in Easy!Appointments, no information about the vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
Easy!Appointments Authorization Issues Vulnerability
Easy!Appointments is a web-based appointment and schedule management system. A security vulnerability exists in Easy!Appointments version 1.3.0. An attacker can exploit this vulnerability to bypass CAPTCHA protection...
CVE-2018-13063
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
CVE-2018-13060
Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue...
CVE-2018-13060
Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue...
CVE-2018-13063
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
Authorization
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
Code injection
Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue...
CVE-2018-13063
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
CVE-2018-13063
Technical details about CVE-2018-13063 are not provided in the connected documents; only the basic description is present. Monitor for updates and additional disclosures to assess affected components, impact, and remediation.
CVE-2018-13060
Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue...
CVE-2018-13060
CVE-2018-13060 affects Easy!Appointments 1.3.0. Multiple connected sources document a vulnerability where CAPTCHA protection can be bypassed, enabling an attacker to bypass CAPTCHA and potentially abuse the login/appointment flow. Root cause details in the sources indicate a guessable CAPTCHA iss...
WordPress Easy!Appointments Plugin Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy!Appointments is a web-based appointment management plugin used in it. An information disclosure vulnerability exists in the...