Lucene search
+L

CVE-2017-14239

🗓️ 11 Sep 2017 09:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 86 Views🌐 WEB

Multiple XSS vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cnvd
CNVD
Multiple cross-site scripting vulnerabilities in Dolibarr ERP/CRM (CNVD-2017-32849)
12 Sep 201700:00
–cnvd
cvelist
Cvelist
CVE-2017-14239
11 Sep 201709:00
–cvelist
euvd
EUVD
EUVD-2022-2912
3 Oct 202520:07
–euvd
github
Github Security Blog
Dolibarr cross-site scripting (XSS) vulnerability
17 May 202200:53
–github
mend
Mend
CVE-2017-14239
11 Sep 201709:00
–mend
nvd
NVD
CVE-2017-14239
11 Sep 201709:29
–nvd
openvas
OpenVAS
Dolibarr 6.0.0 Multiple Vulnerabilities
19 Sep 201700:00
–openvas
osv_cve
osv_cve
CVE-2017-14239
11 Sep 201709:29
–osv_cve
osv_ghsa
osv_ghsa
GHSA-74C7-R9M3-HVJ4 Dolibarr cross-site scripting (XSS) vulnerability
17 May 202200:53
–osv_ghsa
osv_ubuntu
osv_ubuntu
UBUNTU-CVE-2017-14239
11 Sep 201709:29
–osv_ubuntu
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
CompanyNamerequest body/admin/company.phpReflected XSS via the CompanyName parameter in the company management page.CWE-79
CompanyAddressrequest body/admin/company.phpReflected XSS via the CompanyAddress parameter in the company management page.CWE-79
CompanyZiprequest body/admin/company.phpReflected XSS via the CompanyZip parameter in the company management page.CWE-79
CompanyTownrequest body/admin/company.phpReflected XSS via the CompanyTown parameter in the company management page.CWE-79
Faxrequest body/admin/company.phpReflected XSS via the Fax parameter in the company management page.CWE-79
EMailrequest body/admin/company.phpReflected XSS via the EMail parameter in the company management page.CWE-79
Webrequest body/admin/company.phpReflected XSS via the Web parameter in the company management page.CWE-79
ManagingDirectorsrequest body/admin/company.phpReflected XSS via the ManagingDirectors parameter in the company management page.CWE-79
Noterequest body/admin/company.phpReflected XSS via the Note parameter in the company management page.CWE-79
Capitalrequest body/admin/company.phpReflected XSS via the Capital parameter in the company management page.CWE-79
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 01:05Current
6.5Medium risk
Vulners AI Score6.5
CVSS 23.5
CVSS 35.4
EPSS0.00722
86