hoteldruid vulnerabilities (Debian)

32 vulnerabilities.

• hoteldruid Debian HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. CVE-2023-34854 6.6 MediumSeptember 14, 2026
• hoteldruid Debian HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php... CVE-2025-55816 Public exploit 6.1 MediumDecember 11, 2025
• hoteldruid Debian In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb... CVE-2025-44203 Public exploit 7.5 HighJune 20, 2025
• hoteldruid Debian A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute... CVE-2023-43378 6.1 MediumApril 22, 2025
• hoteldruid Debian An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the... CVE-2025-25749 Public exploit 7.1 HighMarch 11, 2025
• hoteldruid Debian A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to... CVE-2025-25748 Public exploitDisputed 7.3 HighMarch 11, 2025
• hoteldruid Debian Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to... CVE-2025-25747 Public exploit 5.4 MediumMarch 11, 2025
• hoteldruid Debian Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to... CVE-2024-23091 7.5 HighJuly 30, 2024
• hoteldruid Debian Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote... CVE-2023-47164 6.1 MediumNovember 10, 2023
• hoteldruid Debian A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid... CVE-2023-43377 5.4 MediumSeptember 20, 2023
• hoteldruid Debian A cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows... CVE-2023-43376 5.4 MediumSeptember 20, 2023
• hoteldruid Debian Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid... CVE-2023-43375 9.8 CriticalSeptember 20, 2023
• hoteldruid Debian Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log... CVE-2023-43374 9.8 CriticalSeptember 20, 2023
• hoteldruid Debian Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg... CVE-2023-43373 9.8 CriticalSeptember 20, 2023
• hoteldruid Debian Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle... CVE-2023-43371 9.8 CriticalSeptember 20, 2023
• hoteldruid Debian A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code... CVE-2023-34537 Public exploit 5.4 MediumJune 13, 2023
• hoteldruid Debian hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability. CVE-2023-33817 Public exploit 8.8 HighJune 13, 2023
• hoteldruid Debian A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version... CVE-2023-29839 Public exploit 5.4 MediumMay 3, 2023
• hoteldruid Debian HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session... CVE-2021-42948 Public exploitFix available 3.7 LowSeptember 16, 2022
• hoteldruid Debian The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a... CVE-2021-42949 Public exploitFix available 9.8 CriticalSeptember 16, 2022
• hoteldruid Debian HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability... CVE-2022-26564 Fix available 6.1 MediumApril 26, 2022
• hoteldruid Debian HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is... CVE-2022-22909 Public exploitFix available EPSS 45.4% 8.8 HighMarch 2, 2022
• hoteldruid Debian DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1... CVE-2021-38559 Fix available 6.1 MediumAugust 26, 2021
• hoteldruid Debian A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of... CVE-2021-37833 Public exploitFix available 6.1 MediumAugust 3, 2021
• hoteldruid Debian A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as... CVE-2021-37832 Public exploitFix available 9.8 CriticalAugust 3, 2021
• hoteldruid Debian Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice... CVE-2019-9085 Fix available 6.5 MediumJune 24, 2019
• hoteldruid Debian HotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter. CVE-2019-9086 Fix available 9.8 CriticalJune 7, 2019
• hoteldruid Debian HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter. CVE-2019-9087 Fix available 9.8 CriticalJune 7, 2019
• hoteldruid Debian In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php ... CVE-2019-9084 Fix available 4.9 MediumJune 7, 2019
• hoteldruid Debian HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters... CVE-2019-8937 Public exploitFix available 6.1 MediumMay 17, 2019
• hoteldruid Debian HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in ... CVE-2018-1000871 Fix available 9.8 CriticalDecember 20, 2018
• hoteldruid Debian [(1) Server Side Request Forgery (SSRF), (2) persistant Cross site scripting (XSS), and (3) File upload vulnerability.] CVE-2022-45592 No scoreJanuary 1, 0001