simplybook records

3 published records for vendor simplybook.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-11887No exploit	SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution.simplybook · simplybook · CWE-434 pre-auth RCE File upload	Critical9.8	—	2.3%	May 17, 2019
36Monitor	CVE-2019-11489No exploit	Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-Psimplybook · simplybook	High8.8	—	2.5%	Apr 25, 2019
32Monitor	CVE-2019-11488No exploit	Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attacsimplybook · simplybook · CWE-287 Pre-auth Auth bypass	High8.1	—	1.5%	Apr 25, 2019

CVE-2019-11887
40Plan
SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- File upload
simplybook · simplybookMay 17, 2019
CVE-2019-11489
36Monitor
Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-P
HighCVSS 8.8No exploitEPSS 2%
simplybook · simplybookApr 25, 2019
CVE-2019-11488
32Monitor
Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attac
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
- Auth bypass
simplybook · simplybookApr 25, 2019