4 results · Clear filters · Feed
-
High 7.5CVE-2025-44203 Public exploit
In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is co…
-
High 7.3CVE-2025-25748 Public exploit
A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized a…
-
High 7.1CVE-2025-25749 Public exploit
An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of p…
-
High 7.5
Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwo…