Lucene search

K
cvelistMitreCVELIST:CVE-2018-13448
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2018-13448

2022-10-0316:22:18
mitre
www.cve.org
sql injection
dolibarr erp/crm
v7.0.3
remote attackers
arbitrary sql commands
country_id parameter

0.001 Low

EPSS

Percentile

47.1%

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.

0.001 Low

EPSS

Percentile

47.1%