CVE-2021-42949

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

Authentication flaw

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

CVE-2021-42949

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

CVE-2021-42948

CVE-2021-42948 affects HotelDruid Hotel Management Software, specifically version 3.0.3 and below. The root cause is exposure of session tokens in multiple links via GET parameters, enabling attackers to access user session IDs. The vulnerability impact is limited to session token disclosure with...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42949

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

CVE-2021-42949

CVE-2021-42949 affects HotelDruid Hotel Management Software v3.0.3 where the controlla_login function generates a predictable session token, enabling authentication bypass via brute force. Multiple sources (NVD entry, OSV, Ubuntu/Debian trackers, and Nessus/NASL plugin) confirm a high-risk issue ...

CVE-2021-42949

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

CVE-2021-42949

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

HotelDruid 授权问题漏洞

HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. HotelDruid Hotel Management Software version v3.0.3 suffers from an authorization issue vulnerability that stems from the...

PT-2022-11750 · Unknown +1 · Hoteldruid Hotel Management +1

Name of the Vulnerable Software and Affected Versions: HotelDruid Hotel Management Software version 3.0.3 Description: The issue concerns the controlla login function in the software, which generates a predictable session token. This predictability allows attackers to bypass authentication throug...

PT-2022-11749

Name of the Vulnerable Software and Affected Versions HotelDruid Hotel Management Software versions v3.0.3 and earlier Description The issue concerns exposed session tokens in multiple links via GET parameters, allowing attackers to access user session identifiers. Recommendations For HotelDruid...

CVE-2021-42948: Cleartext Transmission of Sensitive Information

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42949: Improper Authentication

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

HotelDruid 安全漏洞

HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. A security vulnerability exists in HotelDruid Hotel Management Software version v3.0.3 and prior versions, which originates fr...

Insecure Token

hoteldruid has insecure session. The vulnerability exists due to a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

Insecure Session

hoteldruid has insecure session token. The vulnerability exists due to an exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

Cross-site Scripting (XSS)

hoteldruid is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization allowing an attacker to inject maliciously crafted script via the prezzoperiodo4 parameter in creaprezzi.php...

Remote Code Execution (RCE)

HotelDruid is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization allowing an attacker to insert a maliciously crafted payload into the name field under the Create New Room module...