Hoteldruid@3.0.2 Security Vulnerabilities and Issues — Hoteldruid@3.0.2 CVE List

Lucene search

DigitaldruidHoteldruid3.0.2

3 matches found

CVE•added 2021/08/03 1:15 p.m.•58 views

CVE-2021-37833

A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution of JavaScript commands.

6.1CVSS6AI score0.05431EPSS

CVE•added 2021/08/03 1:15 p.m.•51 views

CVE-2021-37832

A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter.

9.8CVSS9.7AI score0.1308EPSS

CVE•added 2021/08/26 1:15 p.m.•40 views

CVE-2021-38559

DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter.

6.1CVSS5.9AI score0.00254EPSS