Simplybook

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:simplybook:simplybook:*:*:*:*:enterprise:*:*:*

part: a version: * update: *

VendorSimplybook (c7514ecb-f428-5e27-b39c-00f5b2ab424f)
ProductSimplybook (e2598bc1-0a32-5c9e-b739-84dd09b1ab03)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11489 vulnerable 2026-06-08 05:12:37.278679 Details available
Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-Priv Users to Elevate Privileges to Full Admin Rights via a crafted HTTP PUT Request, as demonstrated by modified JSON data to a /v2/rest/ URI.
Published: 2019-04-25T20:02:41.000Z
Updated: 2024-08-04T22:55:40.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11488 vulnerable 2026-06-08 05:12:37.278270 Details available
Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attackers to READ/WRITE Customer or Administrator data via a persistent HTTP GET Request Hash Link Replay, as demonstrated by a login-link from the browser history.
Published: 2019-04-25T20:08:01.000Z
Updated: 2024-08-04T22:55:40.136Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.