twinkletoessoftware kayıtları
twinkletoessoftware üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2019-9581Kavram kanıtı | phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicotwinkletoessoftware · booked · CWE-434 | Yüksek8,8 | — | %13,5 | 5 Mar 2019 |
24İzleyin | CVE-2022-30706İstismar yok | Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web twinkletoessoftware · booked · CWE-601 | Orta6,1 | — | %0,6 | 26 Tem 2022 |
17İzleyin | CVE-2023-24058İstismar yok | Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservatiotwinkletoessoftware · booked · CWE-284 | Orta4,3 | — | %1,0 | 22 Oca 2023 |
- CVE-2019-958139İzleyin
phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favico
YüksekCVSS 8,8Kavram kanıtıEPSS %13twinkletoessoftware · booked5 Mar 2019
- CVE-2022-3070624İzleyin
Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web
OrtaCVSS 6,1İstismar yokEPSS %1twinkletoessoftware · booked26 Tem 2022
- CVE-2023-2405817İzleyin
Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservatio
OrtaCVSS 4,3İstismar yokEPSS %1twinkletoessoftware · booked22 Oca 2023