HotelDruid 2.3.0 - Cross-Site Scripting Detection

HotelDruid 2.3.0 contains a cross-site scripting vulnerability affecting nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php. !/usr/bin/env python3 -- coding: utf-8 -- """HotelDruid 2.""" from kittysploit import from...

Exploit for Cross-site Scripting in Digitaldruid Hoteldruid

CVE 2021-37833 Hotel Druid 3.0.2 Reflected Cross Site Scriptin...

CVE-2019-9086

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

Sql injection

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

CVE-2019-9086

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

CVE-2019-9086

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

CVE-2019-9086: Improper Neutralization of Special Elements used in an SQL Command

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

CVE-2019-8937

HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php...

CVE-2019-8937

HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php...

CVE-2019-8937

HotelDruid 2.3.0 is affected by a Cross-Site Scripting vulnerability (CVE-2019-8937) affecting parameters nsextt, cambia1, mese_fine, origine, and anno in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php. The root cause is improper input handling allowing injected script...

CVE-2019-8937: Improper Neutralization of Input During Web Page Generation

HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php...

Sql injection

SQL injection vulnerability in visualizzatabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cognomecerca parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-0353

CVE-2008-0353 affects php-residence versions 0.7.2 and 1.0, where visualizza_tabelle.php is vulnerable to SQL injection via the cognome_cerca parameter. The documented impact is that remote attackers can execute arbitrary SQL commands. The connected documents confirm the same description and do n...

CVE-2008-0353: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in visualizzatabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cognomecerca parameter. NOTE: some of these details are obtained from third party information...