Easyappointments Easyappointments 1.5.0
Approved changes feed: RSS · Atom
cpe:2.3:a:easyappointments:easyappointments:1.5.0:*:*:*:*:*:*:*
part: a version: 1.5.0 update: *
| Vendor | Easyappointments (93e21748-e17c-514a-960d-8a5278057e61) |
|---|---|
| Product | Easyappointments (307d2273-240a-511d-be6b-ba51c3fccdde) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/alextselegidis/easyappointments |
purl2cpe | 2026-06-01 10:11:42.167244 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-57602 |
vulnerable | 2026-06-08 06:56:13.618031 |
Details available
An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.
Published: 2025-02-12T00:00:00.000Z
Updated: 2025-03-18T16:03:25.323Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57601 |
vulnerable | 2026-06-08 06:56:13.617509 |
Details available
Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.
Published: 2025-02-12T00:00:00.000Z
Updated: 2025-03-22T14:09:13.095Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3287 |
vulnerable | 2026-06-08 06:09:39.076117 |
A BOLA vulnerability in POST /admins in EasyAppointments < 1.5.0
CRITICAL (9.9)
A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in privilege escalation.
Published: 2024-07-09T10:17:37.145Z
Updated: 2024-08-02T06:48:08.410Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38051 |
vulnerable | 2026-06-08 06:08:16.823036 |
A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.0
CRITICAL (9.9)
A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary). This results in unauthorized access and unauthorized data manipulation.
Published: 2024-07-09T10:27:20.370Z
Updated: 2024-08-02T17:30:14.028Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.