Sql injection

HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...

UBUNTU-CVE-2019-9084

In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...

CVE-2019-9087

HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...

CVE-2019-9087

HotelDruid before v2.3.1 is vulnerable to SQL Injection via the /tab_tariffe.php?numtariffa1 parameter. The root cause is improper input handling in HotelDruid’s web interface, enabling attacker-controlled SQL execution. The CVSS metrics indicate a high/critical impact profile (CVSSv2: base 7.5, ...