Filtered by vendor Digitaldruid
Subscriptions
Filtered by product Hoteldruid
Subscriptions
Total
22 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-9085 | 1 Digitaldruid | 1 Hoteldruid | 2019-06-27 | N/A |
| Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice-creation outage) via the n_file parameter to visualizza_contratto.php with invalid arguments (any non-numeric value), as demonstrated by the anno=2019&id_transazione=1&numero_contratto=1&n_file=a query string to visualizza_contratto.php. | ||||
| CVE-2019-8937 | 1 Digitaldruid | 1 Hoteldruid | 2019-05-17 | N/A |
| HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php. | ||||