Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-43376

Published: 20/09/2023 Updated: 28/09/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0
Subscribe to Hoteldruid

Vulnerability Summary

A cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the nometipotariffa1 parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

digitaldruid hoteldruid 3.0.5

Vendor Advisories

Debian CVElist Bug Report Logs: hoteldruid: CVE-2023-43371 CVE-2023-43373 CVE-2023-43374 CVE-2023-43375 CVE-2023-43376 CVE-2023-43377
Debian Bug report logs - #1052572 hoteldruid: CVE-2023-43371 CVE-2023-43373 CVE-2023-43374 CVE-2023-43375 CVE-2023-43376 CVE-2023-43377 Package: hoteldruid; Maintainer for hoteldruid is Marco Maria Francesco De Santis <marco@digitaldruidnet>; Source for hoteldruid is src:hoteldruid (PTS, buildd, popcon) Reported by: Markus ...

References

CWE-79https://flashy-lemonade-192.notion.site/Cross-site-scripting-in-hoteldruid-version-3-0-5-via-nometipotariffa1-post-parameter-703fde27462c43a1aaa1097fb3416cdc?pvs=4https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052572https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook