179 matches found
EUVD-2022-2979
Malicious code in bioql PyPI...
EUVD-2023-0971
Malicious code in bioql PyPI...
EUVD-2023-1193
Malicious code in bioql PyPI...
EUVD-2023-1287
Malicious code in bioql PyPI...
EUVD-2023-0842
Malicious code in bioql PyPI...
EUVD-2024-53638
Malicious code in bioql PyPI...
EUVD-2023-44219
Malicious code in bioql PyPI...
EUVD-2023-1331
Malicious code in bioql PyPI...
SQL Injection
Overview alextselegidis/easyappointments is a powerful Open Source Appointment Scheduler that can be installed on your server. Affected versions of this package are vulnerable to SQL Injection via the orderby parameter. An attacker can execute arbitrary SQL commands by supplying crafted input...
CVE-2023-2103
Cross-site Scripting XSS - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
CVE-2023-2105
Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
CVE-2023-1367
Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
CVE-2023-1269
Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
CVE-2023-2104
Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
CVE-2023-2102
Cross-site Scripting XSS - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
Denial Of Service (DoS)
alextselegidis/easyappointments is vulnerable to Denial Of Service DoS. The vulnerability is due to booking logic flaws due to insufficient validation of appointment duration, allowing unauthenticated attackers to block future booking availability by creating excessively long appointments...
PT-2025-20076
Name of the Vulnerable Software and Affected Versions Easy!Appointments version 1.5.1 Description A business logic flaw in Easy!Appointments allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking...
Cross-Site Scripting (XSS)
alextselegidis/easyappointments is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper handling of the legalsettings parameter, which allows a remote attacker to execute arbitrary code...