UBUNTU-CVE-2024-23091

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...

HotelDruid 安全漏洞

Hoteldruid is a free and open source hotel management program from Hoteldruid. A security vulnerability exists in HotelDruid versions prior to 1.32 that stems from a weak password hash using MD5, allowing an attacker to obtain plaintext passwords from hashes...

CVE-2024-23091

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...

CVE-2024-23091

HotelDruid before 1.32 uses MD5 for password hashing in funzioni.php, allowing an attacker to obtain plaintext passwords from hashes. This is the concrete vulnerability described in CVE-2024-23091 and is reflected across multiple feeds (NVD, Red Hat, Debian, Ubuntu, OSV, etc.). The CVSSv3.1 base ...

CVE-2024-23091

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...

CVE-2024-23091

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...

PT-2024-19667

Name of the Vulnerable Software and Affected Versions HotelDruid versions prior to 1.32 Description The issue is related to weak password hashing using MD5 in the funzioni.php file. This weakness allows an attacker to obtain plaintext passwords from hash values. Recommendations For HotelDruid...

CVE-2024-23091: Use of Password Hash With Insufficient Computational Effort

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...

CVE-2024-23091

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...

Cross-site Scripting (XSS)

hoteldruid is vulnerable to Cross-site Scripting XSS. The attacker can inject and execute malicious JavaScript code into the affected webpage's parameters. This could be used to deceive users on their browsers and/or exfiltrate data from the affected system...

Remote Code Execution

HotelDruid is vulnerable to Remote Code Execution RCE. The vulnerability is via the backup/restore feature. It can lead to compromising Confidentiality, Integrity and Availability of the system...

Cross-Site Scripting

hoteldruid is vulnerable to Cross-Site Scripting. The vulnerability is due to improper neutralization of input during web page generation. This allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product...

Server Side Request Forgery (SSRF) / XSS / File Upload

HotelDruid is vulnerable to Server Side Request Forgery SSRF / Cross Site Scripting XSS and File Upload Vulnerability. It can lead to compromising Confidentiality, Integrity and Availability of the system...

SQL Injection

hoteldruid is vulnerable to SQL Injection. The vulnerability is due to there is no sanitization of user inputs in idutentelog POST parameter. This allows an attacker to inject malicious SQL commands, and potentially leads to unauthorized data access...

SQL Injection

hoteldruid is vulnerable to SQL Injection. The vulnerability is due to there is no sanitization of user inputs in annonascita, annoscaddoc, giornonascita, giornoscaddoc, linguacli, mesenascita, and mesescaddoc parameters. This allows an attacker to inject malicious SQL commands, and potentially...

SQL Injection

hoteldruid is vulnerable to SQL Injection. The vulnerability is due to there is no sanitization of user inputs in nutenteagg POST parameter. This allows an attacker to inject malicious SQL commands, and potentially leads to unauthorized data access...

SQL Injection

hoteldruid is vulnerable to SQL injection. The vulnerability is due to there is no sanitization of user inputs in numcaselle POST parameter. This allows an attacker to inject malicious SQL commands, and potentially leads to unauthorized data access...

Cross-Site Scripting (XSS)

hoteldruid is vulnerable to Cross-Site Scripting. The vulnerability due to insufficient validation or sanitization of user inputs, in the destinatarioemail1 POST parameter. This allows attackers to inject and execute malicious scripts within the application...

Cross-Site Scripting (XSS)

hoteldruid is vulnerable to Cross-Site Scripting. The vulnerability is due to insufficient validation or sanitization of user inputs, in the nometipotariffa1 POST parameter. This allows attackers to inject and execute malicious scripts within the application.nometipotariffa1...

SQL Injection

hoteldruid is vulnerable to SQL injection. The vulnerability is due to there is no sanitization of user inputs in various parameters of the creaprezzi.php page in HotelDruid. This allows an attacker to inject malicious SQL commands, and potentially leads to unauthorized data access...