CVE-2019-9086

Description

References

• hoteldruid.com/en/download.html · Release Notes
• metamorfosec.com/Files/Advisories/METS-2019-007-A_SQL_Injection_in_HotelDruid_before_v2.3.1.txt · Exploit

hoteldruid의 다른 취약점

• CVE-2025-55816보통 6.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.
• CVE-2025-44203높음 7.5In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs …
• CVE-2023-43378보통 6.1A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payl…
• CVE-2025-25749높음 7.1An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength poli…
• CVE-2025-25748높음 7.3A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions (e.g., modifyi…