EasyAppointments Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in EasyAppointments version 1.5.0. The issue allows remote attackers to escalate privileges through the index.php file.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, potentially leading to unauthorized access or actions within the application.

Reproduction

The vulnerability can be reproduced by brute-forcing the admin login endpoint '/index.php/login/validate'. Although the application has a default rate limit that can be bypassed by waiting a few seconds after every eight failed password attempts, this method allows for a significant number of password attempts within a 24-hour period.