HotelDruid vulnerabilities

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. This may allow uploading dangerous files.

HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file. The vulnerability allows injection of malicious code executed in the user's browser.

In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup completion, causing a race condition during database creation. Sending many concurrent requests can disclose the administrator username, password hash, and salt, and leave the setup partially initialized, preventing login and requiring reinstallation.

A Reflected XSS vulnerability was discovered in HotelDruid version 3.0.5, allowing an attacker to inject malicious code into webpage parameters, potentially tricking users in their browsers or exfiltrating data.

Version 3.0.5 of hoteldruid was found to contain a SQL injection vulnerability.