Lucene search
MitreCVELIST:CVE-2017-17971HistoryOct 03, 2022 - 4:23 p.m.
CVE-2017-17971
2022-10-0316:23:20
mitre
www.cve.org
1
cve-2017-17971
dolibarr erp/crm
xss
0.001 Low
EPSS
Percentile
34.2%
The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which allows XSS.
References
Related
osv
osv
Dolibarr ERP and CRM contain XSS Vulnerability
2022-05-14 03:50:13
CVE-2017-17971
2017-12-29 18:29:00
openvas
openvas
Dolibarr < 7.0.1 XSS Vulnerability
2018-01-04 00:00:00
cve
cve
CVE-2017-17971
2022-10-03 16:23:20
nvd
nvd
CVE-2017-17971
2017-12-29 18:29:00
github
github
Dolibarr ERP and CRM contain XSS Vulnerability
2022-05-14 03:50:13
prion
prion
Cross site scripting
2017-12-29 18:29:00
ubuntucve
ubuntucve
CVE-2017-17971
2017-12-29 00:00:00