Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-37832

Опубликовано: 03 авг. 2021
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Средний

Описание

A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:digitaldruid:hoteldruid:3.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.1007
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 4 лет назад

A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter.

CVSS3: 9.8
debian
больше 4 лет назад

A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid w ...

github
больше 3 лет назад

A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter.

EPSS

Процентиль: 93%
0.1007
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89