CVE-2022-22909
HIGHHotelDruid 3.0.3 - Remote Code Execution via Create New Room Name Field
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-22909. PoCs published by 0z09e, kaal18.
AI-analyzed exploit summary This exploit targets Hotel Druid 3.0.3, leveraging a command injection vulnerability in the room addition functionality to achieve remote code execution. It automates login, privilege checks, and payload delivery via the 'n_app' parameter.
Description
HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module.
Exploits (3)
This exploit targets Hotel Druid 3.0.3, leveraging a command injection vulnerability in the room addition functionality to achieve remote code execution. It automates login, privilege checks, and payload delivery via the 'n_app' parameter.
This repository contains a functional exploit for CVE-2022-22909, a code injection vulnerability in Hotel Druid v3.0.3. The exploit leverages improper handling of room names in `/dati/selectappartamenti.php` to achieve remote code execution by injecting a PHP payload.
This repository contains two Python scripts demonstrating remote code execution (RCE) in Hotel Druid 3.0.3 via CVE-2022-22909. The exploit leverages PHP code injection in room names, which are stored in a PHP file and executed by the server.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H