CVE-2019-25452

🗓️ 22 Feb 2026 13:18:25Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 8 Views

SQL injection in Dolibarr 10.0.1 via elemid in viewcat.php enables unauthenticated data extraction.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2019-25452	22 Feb 202613:18	–	attackerkb
Circl	CVE-2019-25452	1 Mar 202615:40	–	circl
CNNVD	Dolibarr ERP/CRM SQL注入漏洞	22 Feb 202600:00	–	cnnvd
Cvelist	CVE-2019-25452 Dolibarr ERP/CRM 10.0.1 SQL Injection via elemid	22 Feb 202613:18	–	cvelist
NVD	CVE-2019-25452	22 Feb 202614:16	–	nvd
OSV	UBUNTU-CVE-2019-25452	22 Feb 202614:16	–	osv
Positive Technologies	PT-2026-21436	22 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2019-25452	23 Feb 202613:30	–	redhatcve
Snyk	SQL Injection	22 Feb 202614:58	–	snyk
UbuntuCve	CVE-2019-25452	22 Feb 202614:16	–	ubuntucve

NVD

Vulners

CNA

Node

dolibarr dolibarr_erp/crmMatch10.0.1

[
  {
    "vendor": "Dolibarr",
    "product": "Dolibarr ERP/CRM",
    "versions": [
      {
        "version": "10.0.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/dolibarr-erpcrm-sql-injection-via-elemid
exploit-db	www.exploit-db.com/exploits/47362

17 Jun 2026 02:32Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5

CVSS 48.8

EPSS0.00373

SSVC

CWE-89