CVE-2019-9084: Digitaldruid Hoteldruid

Medium severity, CVSS 4.9. EPSS: 1.7% chance of exploitation in the next 30 days.

In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /tab_tariffe.php?anno=[YEAR]&numtariffa1=1a URI. It could allow an administrator to conduct remote denial of service (disrupting certain business functions of the product).

Affected products

• Digitaldruid Hoteldruid: before 2.3.1 (fixed in 2.3.1)

Published 2019-06-07. Last modified 2026-06-17.