UBUNTU-CVE-2019-9084

In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...

Sql injection

HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...

CVE-2019-9087

HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...

CVE-2019-9087

HotelDruid before v2.3.1 is vulnerable to SQL Injection via the /tab_tariffe.php?numtariffa1 parameter. The root cause is improper input handling in HotelDruid’s web interface, enabling attacker-controlled SQL execution. The CVSS metrics indicate a high/critical impact profile (CVSSv2: base 7.5, ...

CVE-2019-9087

HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...

PT-2019-19356

Name of the Vulnerable Software and Affected Versions HotelDruid versions prior to 2.3.1 Description The issue is related to SQL Injection, which can be exploited via the "numtariffa1" parameter in the "/tab tariffe.php" API endpoint. Recommendations For versions prior to 2.3.1, update to version...

CVE-2019-9087: Improper Neutralization of Special Elements used in an SQL Command

HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...

CVE-2019-9084: Divide By Zero

In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...

PT-2019-19353

Name of the Vulnerable Software and Affected Versions Hoteldruid versions prior to 2.3.1 Description A division by zero issue was found due to the mishandling of non-numeric values in the numtariffa1 parameter of the tab tariffe.php file. This could allow an administrator to conduct a remote deni...