Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php. NOTE: 2.5.5 is a version from 2014; the latest version of Booked Scheduler is not affected. However, LabArchives Scheduler (Sep 6, 2022 Feature Release) is affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Booked Scheduler 安全漏洞
Vulnerability Description
Booked Scheduler是Booked公司的一个强大的日程安排解决方案程序。 Booked Scheduler 2.5.5版本存在安全漏洞。攻击者利用该漏洞通过修改userId值为任何其他用户创建和安排事件。
CVSS Information
N/A
Vulnerability Type
N/A