Skip to content

Digitaldruid Hoteldruid vulnerabilities

digitaldruid hoteldruidHotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.CVE-2023-348546.6 MediumSeptember 14, 2026
digitaldruid hoteldruidHotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php...CVE-2025-55816Public exploit6.1 MediumDecember 11, 2025
digitaldruid hoteldruidIn HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb...CVE-2025-44203Public exploit7.5 HighJune 20, 2025
digitaldruid hoteldruidA cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute...CVE-2023-433786.1 MediumApril 22, 2025
digitaldruid hoteldruidAn issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the...CVE-2025-25749Public exploit7.1 HighMarch 11, 2025
digitaldruid hoteldruidA CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to...CVE-2025-25748Public exploitDisputed7.3 HighMarch 11, 2025
digitaldruid hoteldruidCross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to...CVE-2025-25747Public exploit5.4 MediumMarch 11, 2025
digitaldruid hoteldruidWeak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to...CVE-2024-230917.5 HighJuly 30, 2024
digitaldruid hoteldruidCross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote...CVE-2023-471646.1 MediumNovember 10, 2023
digitaldruid hoteldruidA cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid...CVE-2023-433775.4 MediumSeptember 20, 2023
digitaldruid hoteldruidA cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows...CVE-2023-433765.4 MediumSeptember 20, 2023
digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid...CVE-2023-433759.8 CriticalSeptember 20, 2023
digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log...CVE-2023-433749.8 CriticalSeptember 20, 2023
digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg...CVE-2023-433739.8 CriticalSeptember 20, 2023
digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle...CVE-2023-433719.8 CriticalSeptember 20, 2023
digitaldruid hoteldruidA Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code...CVE-2023-34537Public exploit5.4 MediumJune 13, 2023
digitaldruid hoteldruidhoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.CVE-2023-33817Public exploit8.8 HighJune 13, 2023
digitaldruid hoteldruidA Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version...CVE-2023-29839Public exploit5.4 MediumMay 3, 2023
digitaldruid hoteldruidHotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session...CVE-2021-42948Public exploitFix available3.7 LowSeptember 16, 2022
digitaldruid hoteldruidThe component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a...CVE-2021-42949Public exploitFix available9.8 CriticalSeptember 16, 2022
digitaldruid hoteldruidHotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability...CVE-2022-26564Fix available6.1 MediumApril 26, 2022
digitaldruid hoteldruidHotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is...CVE-2022-22909Public exploitFix availableEPSS 45.4%8.8 HighMarch 2, 2022
digitaldruid hoteldruidDigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1...CVE-2021-38559Fix available6.1 MediumAugust 26, 2021
digitaldruid hoteldruidA reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of...CVE-2021-37833Public exploitFix available6.1 MediumAugust 3, 2021
digitaldruid hoteldruidA SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as...CVE-2021-37832Public exploitFix available9.8 CriticalAugust 3, 2021
digitaldruid hoteldruidHoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice...CVE-2019-9085Fix available6.5 MediumJune 24, 2019
digitaldruid hoteldruidHotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter.CVE-2019-9086Fix available9.8 CriticalJune 7, 2019
digitaldruid hoteldruidHotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter.CVE-2019-9087Fix available9.8 CriticalJune 7, 2019
digitaldruid hoteldruidIn Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php ...CVE-2019-9084Fix available4.9 MediumJune 7, 2019
digitaldruid hoteldruidHotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters...CVE-2019-8937Public exploitFix available6.1 MediumMay 17, 2019
digitaldruid hoteldruidHotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in ...CVE-2018-1000871Fix available9.8 CriticalDecember 20, 2018