Approved changes feed: RSS · Atom

cpe:2.3:a:digitaldruid:hoteldruid:3.0.2:*:*:*:*:*:*:*

part: a version: 3.0.2 update: *

VendorDigitaldruid (208995c2-4202-52dd-8549-684a6058cb5f)
ProductHoteldruid (0458aa85-7da3-5c0d-9e4f-0778aa953e47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hoteldruid purl2cpe 2026-06-01 10:15:56.740644
pkg:deb/ubuntu/hoteldruid purl2cpe 2026-06-01 10:15:56.740645
pkg:github/digital-druid/hoteldruid purl2cpe 2026-06-01 10:15:56.740647
pkg:sourceforge/hoteldruid purl2cpe 2026-06-01 10:15:56.740648

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38559 vulnerable 2026-06-08 05:33:47.874169 Details available
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter.
Published: 2021-08-26T12:47:12.000Z
Updated: 2024-08-04T01:44:23.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37833 vulnerable 2026-06-08 05:32:54.778706 Details available
A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution of JavaScript commands.
Published: 2021-08-03T12:31:06.000Z
Updated: 2024-08-04T01:30:08.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37832 vulnerable 2026-06-08 05:32:54.778304 Details available
A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter.
Published: 2021-08-03T12:30:57.000Z
Updated: 2024-08-04T01:30:08.594Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.