PT-2019-19353

Name of the Vulnerable Software and Affected Versions Hoteldruid versions prior to 2.3.1 Description A division by zero issue was found due to the mishandling of non-numeric values in the numtariffa1 parameter of the tab tariffe.php file. This could allow an administrator to conduct a remote deni...

PT-2019-19356

Name of the Vulnerable Software and Affected Versions HotelDruid versions prior to 2.3.1 Description The issue is related to SQL Injection, which can be exploited via the "numtariffa1" parameter in the "/tab tariffe.php" API endpoint. Recommendations For versions prior to 2.3.1, update to version...