CVE-2021-37833

CVE 2021-37833 Hotel Druid 3.0.2 Vulnérabilité de Cross-Site Scripting reflété Une vulnérabilité de Cross-Site Scripting reflété existe dans plusieurs pages de la version 3.0.2 de l'application Hotel Druid, permettant l'exécution arbitraire de commandes JavaScript...

CVE-2022-22909

CVE-2022-22909 Hotel Druid 3.0.3 - Удаленное выполнение кода RCE Эксплойт от kaal Эксплойты 1. HotelDruidExploit.py Этот эксплойт создаст новую комнату с PHP-полезной нагрузкой в качестве имени комнаты . Usage : $ ./HotelDruidExploit.py -h $ ./HotelDruidExploit.py -u http://127.0.0.1/hoteldruid 2...

CVE-2021-37832

CVE 2021-37832 Hotel Druid 3.0.2 Уязвимость SQL-инъекции Уязвимость SQL-инъекции существует в версии 3.0.2 Hotel Druid, когда в качестве базы данных приложения используется SQLite. Злоумышленник может выполнять SQL-команды в базе данных SQLite через уязвимый параметр idappartamenti...

CVE-2023-29839

CVE-2023-29839 Hotel Druid 3.0.4 Vulnerabilità di Cross Site Scripting Memorizzato Link CMS: https://www.hoteldruid.com/ Versione Affetta: 3.0.4 Gravità e CVSS: 5.4 Media | Vettore: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Esiste una vulnerabilità di Cross Site Scripting XSS Memorizzato in...

CVE-2022-22909

CVE-2022-22909 Descrizione È stata trovata una vulnerabilità di Code Injection nell'applicazione Hotel Druid v3.0.3, che un attaccante potrebbe sfruttare per eseguire codice remoto sul server. Per uno sfruttamento riuscito, un attaccante deve avere il privilegio di aggiungere una nuova stanza...

CVE-2023-29839

A Stored Cross Site Scripting XSS vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function...

UBUNTU-CVE-2025-55816

HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting XSS in the /modificaapp.php file...

EUVD-2021-24313

Malware in sbrugna...

EUVD-2023-33376

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-9087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter. CVE-2019-9087 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2019-8937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and...

CVE-2021-37832

A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter...

CVE-2021-37833

A reflected cross-site scripting XSS vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution of JavaScript commands...

HotelDruid SQL Injection Vulnerability

HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. A security vulnerability exists in HotelDruid version v3.0.5, which stems from a SQL injection vulnerability in the parameter...

CVE-2023-34537

A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data...

Exploit for SQL Injection in Digitaldruid Hoteldruid

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 Ho...

CVE-2023-29839

A Stored Cross Site Scripting XSS vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function...

CVE-2023-29839

A Stored Cross Site Scripting XSS vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function...

DEBIAN-CVE-2023-29839

A Stored Cross Site Scripting XSS vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function...