CVE-2019-9084 - CVE House
Back to Database
Status published Medium CVE-2019-9084

In Hoteldruid before 2.3.1, a division by zero was discovered...

Vulnerability Description

In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /tab_tariffe.php?anno=[YEAR]&numtariffa1=1a URI. It could allow an administrator to conduct remote denial of service (disrupting certain business functions of the product).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-9084

Credits & Attribution

No credits recorded in the NVD database.

References

More from digitaldruid

View All →
CVE-2022-26564
HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS)...
Medium 6.1
CVE-2022-22909
HotelDruid v3.0.3 was discovered to contain a remote code execution...
High 8.8
CVE-2021-42949
The component controlla_login function in HotelDruid Hotel Management Software v3.0.3...
Unknown 0
CVE-2021-42948
HotelDruid Hotel Management Software v3.0.3 and below was discovered to...
Low 3.7
CVE-2021-38559
DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting...
Medium 6.1

Affected Vendor

digitaldruid

View all reports →

Affected Software

hoteldruid
Vulnerable Versions:
0

Timeline

Official Publish: June 7th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.