hoteldruid vulnerabilities (Ubuntu)
32 vulnerabilities.
-
hoteldruidUbuntu HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. 6.6 Medium -
hoteldruidUbuntu HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php... 6.1 Medium -
hoteldruidUbuntu In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb... 7.5 High -
hoteldruidUbuntu A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute... 6.1 Medium -
hoteldruidUbuntu An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the... 7.1 High -
hoteldruidUbuntu A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to... 7.3 High -
hoteldruidUbuntu Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to... 5.4 Medium -
hoteldruidUbuntu Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to... 7.5 High -
hoteldruidUbuntu Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote... 6.1 Medium -
hoteldruidUbuntu A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid... 5.4 Medium -
hoteldruidUbuntu A cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows... 5.4 Medium -
hoteldruidUbuntu Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid... 9.8 Critical -
hoteldruidUbuntu Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log... 9.8 Critical -
hoteldruidUbuntu Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg... 9.8 Critical -
hoteldruidUbuntu Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle... 9.8 Critical -
hoteldruidUbuntu A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code... 5.4 Medium -
hoteldruidUbuntu hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability. 8.8 High -
hoteldruidUbuntu A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version... 5.4 Medium -
hoteldruidUbuntu HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session... 3.7 Low -
hoteldruidUbuntu The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a... 9.8 Critical -
hoteldruidUbuntu HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability... 6.1 Medium -
hoteldruidUbuntu HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is... 8.8 High -
hoteldruidUbuntu DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1... 6.1 Medium -
hoteldruidUbuntu A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of... 6.1 Medium -
hoteldruidUbuntu A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as... 9.8 Critical -
hoteldruidUbuntu Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice... 6.5 Medium -
hoteldruidUbuntu HotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter. 9.8 Critical -
hoteldruidUbuntu HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter. 9.8 Critical -
hoteldruidUbuntu In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php ... 4.9 Medium -
hoteldruidUbuntu HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters... 6.1 Medium -
hoteldruidUbuntu HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in ... 9.8 Critical -
hoteldruidUbuntu [(1) Server Side Request Forgery (SSRF), (2) persistant Cross site scripting (XSS), and (3) File upload vulnerability.] No score