472 matches found
CVE-2022-22909
HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module...
CVE-2022-22909
HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module...
CVE-2022-22909
HotelDruid v3.0.3 is affected by a remote code execution (RCE) vulnerability that can be triggered by inserting a crafted payload into the name field in the Create New Room module. The underlying issue arises from room names being stored in /var/www/html/hoteldruid/dati/selectappartamenti.php, a ...
CVE-2022-22909
HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module...
PT-2022-15729
Name of the Vulnerable Software and Affected Versions HotelDruid version 3.0.3 Description A remote code execution issue was discovered, allowing an attacker to execute code by inserting a crafted payload into the name field under the Create New Room module. Recommendations For HotelDruid version...
CVE-2022-22909: Improper Control of Generation of Code
HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module...
HotelDruid 代码注入漏洞
HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. A code injection vulnerability exists in HotelDruid version 3.0.3, which can be exploited by an attacker to remotely execute...
Exploit for SQL Injection in Digitaldruid Hoteldruid
CVE-2021-37832...
Cross-Site Scripting (XSS)
HotelDruid is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in prenota.php affecting the fineperiodo1 parameter...
Cross-Site Scripting (XSS)
hoteldruid is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization of user input which allows an attacker to inject malicious script to the system...
SQL Injection
hoteldruid is vulnerable to sql injection. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter...
DEBIAN-CVE-2021-38559
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter...
CVE-2021-38559
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter...
CVE-2021-38559
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter...
Design/Logic Flaw
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter...
CVE-2021-38559
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter...
UBUNTU-CVE-2021-38559
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter...
CVE-2021-38559
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter...