Skip to content
OpenAdvisories

Vendor

Twinkle Toes Software

2 known vulnerabilities.

Products

Booked Scheduler 1 Booked 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2020-37077

    Booked Scheduler 2.7.7 - Authenticated Directory Traversal

    Booked Scheduler 2.7.7 contains a directory traversal vulnerability in the manage_email_templates.php script that allows authenticated administrators to access unauthorized files. Attackers can exploit the vulnerable 'tn' parameter to read files outside the i…

    Twinkle Toes Software Booked Scheduler