Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Twinkle Toes Software Component: Booked Clear all filters
TI-2022-12842 CVE-2022-30706 · GHSA-3jxm-cp2c-65rc

Open redirect in Twinkle Toes Software Booked

Priority LOW 28

Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00644 Published 2022-07-26 Fixed in 3.3 CWE-601
TI-2019-07000 CVE-2019-9581 · GHSA-qqxj-h4qq-r77g

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field…

Priority MEDIUM 53

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensur…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1349 Published 2019-03-06 No fix listed CWE-434