Описание
In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /tab_tariffe.php?anno=[YEAR]&numtariffa1=1a URI. It could allow an administrator to conduct remote denial of service (disrupting certain business functions of the product).
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | released | 2.3.2-1 |
| disco | ignored | end of life |
| eoan | released | 2.3.2-1 |
| esm-apps/bionic | needed | |
| esm-apps/focal | released | 2.3.2-1 |
| esm-apps/jammy | released | 2.3.2-1 |
| esm-apps/noble | released | 2.3.2-1 |
| esm-apps/xenial | needed |
Показывать по
Ссылки на источники
EPSS
4 Medium
CVSS2
4.9 Medium
CVSS3
Связанные уязвимости
In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /tab_tariffe.php?anno=[YEAR]&numtariffa1=1a URI. It could allow an administrator to conduct remote denial of service (disrupting certain business functions of the product).
In Hoteldruid before 2.3.1, a division by zero was discovered in $num_ ...
In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /tab_tariffe.php?anno=[YEAR]&numtariffa1=1a URI. It could allow an administrator to conduct remote denial of service (disrupting certain business functions of the product).
EPSS
4 Medium
CVSS2
4.9 Medium
CVSS3