Description
HotelDruid 存在远程代码执行漏洞，此漏洞是缺乏校验导致的。
HotelDruid CVE-2022-22909 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sentinelone.com/vulnerability-database/cve-2022-22909/
https://nvd.nist.gov/vuln/detail/CVE-2022-22909
https://www.exploit-db.com/exploits/50754
https://github.com/0z09e/CVE-2022-22909
https://security.snyk.io/vuln/SNYK-DEBIANUNSTABLE-HOTELDRUID-2415067
https://www.rapid7.com/db/vulnerabilities/debian-cve-2022-22909/
https://test.osv.dev/vulnerability/UBUNTU-CVE-2022-22909
https://www.tenablecloud.cn/plugins/nessus/229694
https://cve.yack.one/cve/CVE-2022-22909
https://zh-tw.tenable.com/plugins/nessus/229694
https://avd.aliyun.com/high-risk/list?page=23
https://vulert.com/vuln-db/ubuntu-pro-16-04-lts-hoteldruid-337059
https://vulmon.com/searchpage?q=hotel+druid
https://security-tracker.debian.org/tracker/source-package/hoteldruid
https://www.hoteldruid.com/demo/mostra_sorgente.php?file_sorgente=doc/CHANGELOG
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0802.html
https://www.cybersecurity-help.cz/vdb/SB2022022216
https://www.vulmon.com/searchpage?q=Digitaldruid%20Hoteldruid%203.0.3&scoretype=cvssv2
https://echelongraph.io/pulse/CVE-2022-22909/blast-radius