472 matches found
CVE-2019-9087
HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...
DEBIAN-CVE-2019-9087
HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...
CVE-2019-9087
HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...
CVE-2019-9084
In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...
CVE-2019-9086
HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...
DEBIAN-CVE-2019-9086
HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...
CVE-2019-9084
In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...
CVE-2019-9086
HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...
DEBIAN-CVE-2019-9084
In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...
UBUNTU-CVE-2019-9084
In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...
Design/Logic Flaw
In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...
Sql injection
HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...
Sql injection
HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...
CVE-2019-9087
HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...
CVE-2019-9086
HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...
CVE-2019-9084
In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...
UBUNTU-CVE-2019-9087
HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...
CVE-2019-9086
HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...
CVE-2019-9086
HotelDruid before v2.3.1 is vulnerable to SQL Injection via the /visualizza_tabelle.php anno parameter due to insufficient input validation. The vulnerability affects HotelDruid prior to version 2.3.1 and can impact confidentiality, integrity, and availability. Upgrading to v2.3.1 is the referenc...
