CVE-2018-1000871

CRITICAL

HotelDruid HotelDruid <2.3.0 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-1000871. PoCs published by Sainadh Jamalpur.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in HotelDruid version 2.3 via the 'id_utente_mod' parameter. The payload uses EXTRACTVALUE to extract database information, confirming the vulnerability.

Description

HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "id_utente_mod" parameter in gestione_utenti.php file that can result in An attacker can dump all the database records of backend webserver. This attack appear to be exploitable via the attack can be done by anyone via specially crafted sql query passed to the "id_utente_mod=1" parameter.

Exploits (1)

exploitdb WORKING POC
by Sainadh Jamalpur · textwebappsphp
https://www.exploit-db.com/exploits/45976

This exploit demonstrates a SQL injection vulnerability in HotelDruid version 2.3 via the 'id_utente_mod' parameter. The payload uses EXTRACTVALUE to extract database information, confirming the vulnerability.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: HotelDruid version 2.3
No auth needed
Prerequisites: Access to the vulnerable endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/45976

Scores

CVSS v3 9.8
EPSS 0.0162
EPSS Percentile 72.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
digitaldruid/hoteldruid < 2.3.0
Published Dec 20, 2018
Tracked Since Feb 18, 2026