Lucene search
GitHub Advisory DatabaseGHSA-H34Q-878W-W96RHistoryMay 14, 2022 - 1:27 a.m.
Dolibarr SQL injection via the integer parameters qty and value_unit
2022-05-1401:27:09
CWE-89
GitHub Advisory Database
github.com
6
An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | ge | 3.8 | |
| dolibarr/dolibarr | le | 7.0.0 |
Related
osv
osv
CVE-2018-16809
2019-03-07 23:29:00
Dolibarr SQL injection via the integer parameters qty and value_unit
2022-05-14 01:27:09
prion
prion
Sql injection
2019-03-07 23:29:00
veracode
veracode
SQL Injection
2019-03-08 06:38:26
cvelist
cvelist
CVE-2018-16809
2019-03-07 22:00:00
cve
cve
CVE-2018-16809
2019-03-07 23:29:00
ubuntucve
ubuntucve
CVE-2018-16809
2019-03-07 00:00:00
openvas
openvas
Dolibarr < 7.0.1 Multiple Vulnerabilities
2019-03-12 00:00:00