CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2022/09/16 4:15 p.m.•23 views

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

3.7CVSS0.00721EPSS

SaveExploits0References3

Prion•added 2022/09/16 4:15 p.m.•20 views

Hardcoded credentials

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

2.6CVSS4.3AI score0.00721EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2022/09/16 3:14 p.m.•27 views

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

4.7AI score0.00721EPSS

SaveExploits0References3

Prion•added 2022/04/26 11:15 p.m.•15 views

Cross site scripting

HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting XSS vulnerability via the prezzoperiodo4 parameter in creaprezzi.php...

4.3CVSS5.9AI score0.02759EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2022/04/26 10:30 p.m.•41 views

CVE-2022-26564

HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting XSS vulnerability via the prezzoperiodo4 parameter in creaprezzi.php...

6.2AI score0.02759EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by