twinkletoessoftware records
3 published records for vendor twinkletoessoftware.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2019-9581Proof of concept | phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicotwinkletoessoftware · booked · CWE-434 | High8.8 | — | 13.5% | Mar 5, 2019 |
24Monitor | CVE-2022-30706No exploit | Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web twinkletoessoftware · booked · CWE-601 | Medium6.1 | — | 0.6% | Jul 26, 2022 |
17Monitor | CVE-2023-24058No exploit | Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservatiotwinkletoessoftware · booked · CWE-284 | Medium4.3 | — | 1.0% | Jan 22, 2023 |
- CVE-2019-958139Monitor
phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favico
HighCVSS 8.8Proof of conceptEPSS 13%twinkletoessoftware · bookedMar 5, 2019
- CVE-2022-3070624Monitor
Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web
MediumCVSS 6.1No exploitEPSS 1%twinkletoessoftware · bookedJul 26, 2022
- CVE-2023-2405817Monitor
Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservatio
MediumCVSS 4.3No exploitEPSS 1%twinkletoessoftware · bookedJan 22, 2023