vendor:
Hoteldruid
by:
Sainadh Jamalpur
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Hoteldruid
Affected Version From: 2.3
Affected Version To: 2.3
Patch Exists: NO
Related CWE: N/A
CPE: hoteldruid
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows x64/ Kali linux x64
2018
SQL Injection in HotelDruid version 2.3
Hoteldruid is an open source program for hotel management (property management software) developed by DigitalDruid.Net. The 'id_utente_mod' parameter is vulnerable to SQL Injection vulnerability.
Mitigation:
Input validation should be done to prevent SQL Injection attacks.
