AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-9085

MEDIUM · CVSS 6.5 EPSS 1.97%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-06-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-9085
Severity
MEDIUM
CVSS
6.5
EPSS
1.97%

Original NVD Description

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice-creation outage) via the n_file parameter to visualizza_contratto.php with invalid arguments (any non-numeric value), as demonstrated by the anno=2019&id_transazione=1&numero_contratto=1&n_file=a query string to visualizza_contratto.php.