{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-06T08:03:44.439","vulnerabilities":[{"cve":{"id":"CVE-2021-37832","sourceIdentifier":"cve@mitre.org","published":"2021-08-03T13:15:09.393","lastModified":"2024-11-21T06:15:56.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter."},{"lang":"es","value":"Se presenta una vulnerabilidad de inyección SQL en la versión 3.0.2 de Hotel Druid cuando SQLite es usado como base de datos de la aplicación. Un atacante malicioso puede emitir comandos SQL a la base de datos SQLite mediante el parámetro vulnerable idappartamenti"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digitaldruid:hoteldruid:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6051EDA7-2422-4343-849A-2D2B6A81BEEA"}]}]}],"references":[{"url":"https://github.com/dievus/CVE-2021-37832","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.hoteldruid.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://github.com/dievus/CVE-2021-37832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.hoteldruid.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}}]}