Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-29448 — unauthenticated booking logic flaw in Easy!Appointments v1.5.1 causing denial of service. | Kitploit
Tools/GitHubGitHub/abdullah4eb/cve-2025-29448
Vulnerability AnalysisWeb Application ExploitationWeb SecurityPenetration Testing
GitHubabdullah4eb/cve-2025-29448

CVE-2025-29448

unauthenticated booking logic flaw in Easy!Appointments v1.5.1 causing denial of service.

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-29448

Description

booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

Steps to Reproduce

  1. Intercept an appointment booking request.
  2. Locate the post_data[appointment][end_datetime] parameter in the request body.
  3. Modify the parameter value to a date far in the future and send the request.
  4. The application accepts the long booking, blocking all future availability and causing a denial of service.

Fixed in Commit

https://github.com/alextselegidis/easyappointments/commit/74633b60f28bdef3cc9f905c0599cef121fee32b

Download Tool