CVE-2023-33817
HighPublished
hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.
- Published
- Jun 13, 2023
- Updated
- Jan 3, 2025
- Assigning CNA
- mitre
- Evidence observed
- Aug 8, 2026
Primary CVSS
8.8/ 10High
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.5%
Low · next 30 days
- Percentile
- 73.5%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.
Sources
1Proof-of-concept demonstrating SQL injection in HotelDruid v3.0.5, with steps to exploit vulnerable parameters for data retrieval and remote code execution on the database.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.