Lucene search

K
osvGoogleOSV:CVE-2021-33816
HistoryNov 10, 2021 - 11:15 p.m.

CVE-2021-33816

2021-11-1023:15:08
Google
osv.dev
6
dolibarr
website builder
remote execution
incomplete protection

AI Score

7.6

Confidence

Low

EPSS

0.019

Percentile

88.8%

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shell_exec are blocked but backticks are not blocked.

AI Score

7.6

Confidence

Low

EPSS

0.019

Percentile

88.8%