CVE-2022-22909

HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module...

Remote Code Execution (RCE)

HotelDruid is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization allowing an attacker to insert a maliciously crafted payload into the name field under the Create New Room module...

CVE-2022-22909

HotelDruid v3.0.3 is affected by a remote code execution (RCE) vulnerability that can be triggered by inserting a crafted payload into the name field in the Create New Room module. The underlying issue arises from room names being stored in /var/www/html/hoteldruid/dati/selectappartamenti.php, a ...