472 matches found
CVE-2023-34537
A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data...
PT-2023-24912 · Unknown +1 · Hoteldruid +1
Name of the Vulnerable Software and Affected Versions: HotelDruid version 3.0.5 Description: A Reflected XSS issue was discovered, allowing an attacker to issue malicious code or commands on an affected webpage's parameter. This can trick users on their browsers and/or exfiltrate data...
CVE-2023-33817: Improper Neutralization of Special Elements used in an SQL Command
hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability...
CVE-2023-33817
hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability...
PT-2023-24506
Name of the Vulnerable Software and Affected Versions hoteldruid version 3.0.5 Description The issue is related to a SQL injection vulnerability. Recommendations For hoteldruid version 3.0.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2023-34537
HotelDruid 3.0.5 is affected by a Reflected XSS vulnerability (CVE-2023-34537). The issue arises in user-controllable parameters on the affected web page, enabling an attacker to inject script or HTML that can be executed by the victim’s browser and potentially exfiltrate data. Evidence across mu...
CVE-2023-34537: Improper Neutralization of Input During Web Page Generation
A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data...
CVE-2023-33817
hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability...
CVE-2023-33817
hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability...
CVE-2023-34537
A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data...
CVE-2023-34537
A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data...
PT-2023-25035
Name of the Vulnerable Software and Affected Versions HotelDruid affected versions not specified Description The issue allows for authenticated remote code execution via the backup/restore functionality. Recommendations At the moment, there is no information about a newer version that contains a...
DigitalDruid HotelDruid Remote Code Execution (CVE-2022-22909)
A remote code execution vulnerability exists in DigitalDruid HotelDruid. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
Hardcoded credentials
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...
UBUNTU-CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...