Hoteldruid
Approved changes feed: RSS · Atom
cpe:2.3:a:digitaldruid:hoteldruid:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Digitaldruid (208995c2-4202-52dd-8549-684a6058cb5f) |
|---|---|
| Product | Hoteldruid (0458aa85-7da3-5c0d-9e4f-0778aa953e47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/hoteldruid |
purl2cpe | 2026-06-01 10:15:56.713797 |
pkg:deb/ubuntu/hoteldruid |
purl2cpe | 2026-06-01 10:15:56.713799 |
pkg:github/digital-druid/hoteldruid |
purl2cpe | 2026-06-01 10:15:56.713800 |
pkg:sourceforge/hoteldruid |
purl2cpe | 2026-06-01 10:15:56.713801 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34854 |
vulnerable | 2026-09-16 04:40:16.783551 |
Details available
MEDIUM (6.6)
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.
Published: 2026-09-14T00:00:00.000Z
Updated: 2026-09-14T18:13:12.947Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55816 |
vulnerable | 2026-06-08 07:33:15.360867 |
Details available
HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.
Published: 2025-12-11T00:00:00.000Z
Updated: 2025-12-12T21:05:37.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25749 |
vulnerable | 2026-06-08 07:12:51.327759 |
Details available
An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.
Published: 2025-03-11T00:00:00.000Z
Updated: 2025-03-24T17:37:21.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23091 |
vulnerable | 2026-06-08 06:29:36.223244 |
Details available
Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values.
Published: 2024-07-30T00:00:00.000Z
Updated: 2025-03-18T19:23:00.788Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47164 |
vulnerable | 2026-06-08 06:14:24.130047 |
Details available
Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
Published: 2023-11-10T08:59:13.640Z
Updated: 2024-09-03T17:39:01.910Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42948 |
vulnerable | 2026-06-08 05:35:23.053114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9087 |
vulnerable | 2026-06-08 05:14:24.969351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9086 |
vulnerable | 2026-06-08 05:14:24.968862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9085 |
vulnerable | 2026-06-08 05:14:24.968528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9084 |
vulnerable | 2026-06-08 05:14:24.967899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000871 |
vulnerable | 2026-06-08 05:10:26.147280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.