Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Twinkle Toes Software Clear all filters
TI-2020-19212 CVE-2020-37077 · GHSA-pw32-4hxv-cxrf

Booked Scheduler 2.7.7 - Authenticated Directory Traversal

Priority MEDIUM 64

Booked Scheduler 2.7.7 contains a directory traversal vulnerability in the manage_email_templates.php script that allows authenticated administrators to access unauthorized files.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00715 Published 2026-02-03 No fix listed CWE-22
TI-2022-12842 CVE-2022-30706 · GHSA-3jxm-cp2c-65rc

Open redirect in Twinkle Toes Software Booked

Priority LOW 28

Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00644 Published 2022-07-26 Fixed in 3.3 CWE-601
TI-2019-07000 CVE-2019-9581 · GHSA-qqxj-h4qq-r77g

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field…

Priority MEDIUM 53

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensur…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1349 Published 2019-03-06 No fix listed CWE-434