Simplybook

simplybook

Vendor: Simplybook • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-11887 1Simplybook 1Simplybook Jun 17, 2026 May 17, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution.
CVE-2019-11489 1Simplybook 1Simplybook Jun 17, 2026 Apr 25, 2019 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-Priv Users to Elevate Privileges to Full Admin Rights via a crafted HTTP PUT Requ...Show more Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-Priv Users to Elevate Privileges to Full Admin Rights via a crafted HTTP PUT Request, as demonstrated by modified JSON data to a /v2/rest/ URI.Show less
CVE-2019-11488 1Simplybook 1Simplybook Jun 17, 2026 Apr 25, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attackers to READ/WRITE Customer or Administrator data via a persistent HTTP GET Requ...Show more Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attackers to READ/WRITE Customer or Administrator data via a persistent HTTP GET Request Hash Link Replay, as demonstrated by a login-link from the browser history.Show less