high7.5
CVE-2024-23091
Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values.
Impact
Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digitaldruid | Hoteldruid | before 1.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40cnetsec/security-advisory-cve-2024-23091-weak-password-hashing-using-md5-f18a6fe3a473
- https://www.hoteldruid.com/en/download.html
- https://medium.com/%40cnetsec/security-advisory-cve-2024-23091-weak-password-hashing-using-md5-f18a6fe3a473
- https://www.hoteldruid.com/en/download.html