Most recent entries from all

EUVD-2026-32278

fkie_cve-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.

GHSA-q4wp-vrv8-q2xh

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.

gsd-2021-42948

UBUNTU-CVE-2021-42948

Affected: Ubuntu:16.04:LTS: hoteldruid, Ubuntu:18.04:LTS: hoteldruid, Ubuntu:20.04:LTS: hoteldruid, Ubuntu:22.04:LTS: hoteldruid

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.