CVE-2022-27247

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer e.g., data of birth, full address, mail information, and phone number via GastKont Insecure Direct Object Reference...

Design/Logic Flaw

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer e.g., data of birth, full address, mail information, and phone number via GastKont Insecure Direct Object Reference...

PT-2022-18327

Name of the Vulnerable Software and Affected Versions cdSoft Onlinetools-Smart Winhotel.MX version 2021 Description The issue allows an attacker to download sensitive customer information, including date of birth, full address, mail information, and phone number, via an Insecure Direct Object...

CVE-2022-27247: Authorization Bypass Through User-Controlled Key

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer e.g., data of birth, full address, mail information, and phone number via GastKont Insecure Direct Object Reference...