CVE-2023-29839

CVE-2023-29839 Hotel Druid 3.0.4 存储型跨站脚本漏洞 CMS链接：https://www.hoteldruid.com/ 受影响版本：3.0.4 严重性与CVSS：5.4（中危）| 向量：CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Hotel Druid 应用程序 3.0.4 版本的多个页面中存在存储型跨站脚本（XSS）漏洞，可导致任意命令执行。 受影响字段：在“文档”功能中的姓氏、名字、昵称 受影响链接：/visualizzacontratto.php 触发载荷：访问示例 文档预览功能 修复措施：升级至...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Code‑Projects Hotel & Tourism Reservation 1.0 SQL 注入漏洞利用工具 -orange -red 功能完备、多线程、基于时间盲注的 SQL 注入漏洞利用工具，针对 CVE‑2026‑14762。 目标为 Code‑Projects Hotel & Tourism Reservation 应用（版本 1.0）的 /admin/rooms.php 端点。 可实现完整的数据库枚举、文件系统读取（LOADFILE）和任意文件写入（INTO OUTFILE / DUMPFILE）——最终通过部署 WebShell...

CVE-2021-41651

CVE-2021-41651 CVE-2021-41651 Inyección SQL en hotel-mgmt-system El hotel-mgmt-system es vulnerable a un ataque de inyección SQL ciega basada en tiempo sin autenticación. El parámetro cid en la página /processupdateprofile.php no sanea la entrada del usuario, un atacante puede extraer datos...

CVE-2022-22909

CVE-2022-22909 Hotel Druid 3.0.3 - 远程代码执行 RCE 由 kaal 开发的漏洞利用程序 漏洞利用程序 1. HotelDruidExploit.py 此漏洞利用程序将创建一个新房间，并以我们的 PHP 负载作为房间名称。 用法： $ ./HotelDruidExploit.py -h $ ./HotelDruidExploit.py -u http://127.0.0.1/hoteldruid 2. HotelDruidExploitRoom.py 此漏洞利用程序在您已知房间名称时有效。 用法： $ ./HotelDruidExploitRoom.p...

CVE-2021-37832

CVE 2021-37832 Hotel Druid 3.0.2 SQL注入漏洞 Hotel Druid 3.0.2 版本在使用 SQLite 作为应用数据库时存在 SQL 注入漏洞。恶意攻击者可以通过存在漏洞的 idappartamenti 参数向 SQLite 数据库发送 SQL 命令。 https://vulners.com/cve/CVE-2021-37832 https://nvd.nist.gov/vuln/detail/CVE-2021-37832match-6858716 存在漏洞的 PHP 页面： modificaapp.php - idappartamenti 参数...

CVE-2024-10410

Código fuente Online Hotel Reservation System en PHP/MySQLi con Código Fuente | SourceCodester Descripción Se encontró una vulnerabilidad de alto riesgo en Online Hotel Reservation System, que afecta a la función de carga del archivo /marimar/admin/modroom/controller.php. La operación de evasión ...

CVE-2021-37833

CVE 2021-37833 Hotel Druid 3.0.2 Vulnerabilidad de Cross Site Scripting Reflejado Existe una vulnerabilidad de Cross Site Scripting reflejado en múltiples páginas de la versión 3.0.2 de la aplicación Hotel Druid que permite la ejecución arbitraria de comandos JavaScript...

CVE-2023-49989

CVE-2023-49989 Hotel Booking Management v1.0 - 位于 update.php 中 "id" 参数的 SQL 注入漏洞 描述 ：Hotel Booking Management v1.0 被发现存在通过 update.php 中 id 参数的 SQL 注入漏洞。 受影响的产品版本 ：Hotel Booking Management v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认日期 ：19/12/2023 CVE ：CVE-2023-49989 测试环境 ：Windows 复现步骤：...

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

WP Hotel Booking < 1.10.4 - PHP Object Injection

The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpresshotelbooking1 cookie in load in includes/class-wphb-sessions.php. id: CVE-2020-29047 info: name: WP Hotel Booking 1.10.4 - PHP Object...

WP Hotel Booking <= 2.0.7 - SQL Injection

WP Hotel Booking WordPress plugin before 2.0.8 contains a SQL injection caused by lack of authorization, CSRF checks, and input escaping in a function hooked to admininit, letting unauthenticated users perform SQL injections, exploit requires no authentication. id: CVE-2023-5652 info: name: WP...

Hotel Booking Lite < 4.8.5 - Arbitrary File Download & Deletion

The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server id: CVE-2023-5991 info: name: Hotel Booking...

HotelDruid-CVE-2021-42949

CVE-2021-42949 El componente de la función controllalogin en HotelDruid Hotel Management Software v3.0.3 genera un token de sesión predecible, lo que permite a los atacantes omitir la autenticación mediante ataques de fuerza bruta. El id de sesión se crea dinámicamente en cada inicio de sesión...

CVE-2026-10289-XSS

Sistema de Reservas de Hotel y Turismo - Cross-Site Scripting XSS Almacenado Detalles de la Vulnerabilidad...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - rooms.php 中“npss”参数的SQL注入漏洞 描述 : Hotel Booking Management 1.0版本存在SQL注入漏洞。恶意攻击者可以通过编辑房型价格和折扣时使用易受攻击的参数npss、dpss、npsd、dpsd、npds、dpds、npdd、dpdd、npdst或dpdst，向MySQL数据库发送SQL命令。 受影响的产品版本 : Hotel Booking Management v1.0 CVE作者 : Geraldo Alcântara 日期 :...

CVE-2024-3605

CVE-2024-3605 WP Hotel Booking = 2.1.0 - Inyección SQL no autenticada Descripción El plugin WP Hotel Booking para WordPress es vulnerable a la inyección SQL a través del parámetro 'roomtype' del endpoint /wphb/v1/rooms/search-rooms de la API REST en todas las versiones hasta la 2.1.0 incluida,...

CVE-2026-92234

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

CVE-2026-92234

QloApps versions through 1.7.0 contain a reflected cross-site scripting (XSS) vulnerability in the Hotel Reservation System feature management page (back-office). The child_features parameter is reflected unescaped into validation error messages, allowing an authenticated back-office user who fol...

EUVD-2026-80002

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

CVE-2026-92234 QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...