CVE-2019-9087

HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-06-07

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Hoteldruid (Digitaldruid)

References

• http://www.hoteldruid.com/en/download.html
• https://metamorfosec.com/Files/Advisories/METS-2019-008-A_SQL_Injection_in_HotelDruid_before_v2.3.1.txt