2019-06-07 20:39:18
mitre
PUBLISHED
HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter.