Vulners
Lucene search
Dolibarr 3.5 / 3.6 HTML Injection
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Multiple HTML Injection Vulnerabilities in Dolibarr | 5 Jun 201500:00 | – | cnvd |
 | CVE-2015-3935 | 10 Jun 201514:00 | – | cve |
 | CVE-2015-3935 | 10 Jun 201514:00 | – | cvelist |
 | EUVD-2022-2782 | 3 Oct 202520:07 | – | euvd |
 | Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability | 17 May 202203:29 | – | github |
 | CVE-2015-3935 | 10 Jun 201514:59 | – | nvd |
 | GHSA-6FW8-VF2X-4WPM Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability | 17 May 202203:29 | – | osv |
| UBUNTU-CVE-2015-3935 | 10 Jun 201514:59 | – | osv |
 | Cross site scripting | 10 Jun 201514:59 | – | prion |
 | CVE-2015-3935 | 10 Jun 201514:59 | – | ubuntucve |
10
`# Title: HTML Injection in dolibarr
# Author: Sergio Galán - @NaxoneZ
# Date: May 20,2015
# Vendor Homepage: *http://www.dolibarr.es/ <http://www.dolibarr.es/>*
# Vulnerable version: 3.5 / 3.6
# CVE: CVE-2015-3935
Dolibarr no properly escape untrusted data to prevent injection
[*] Page affected
- dolibarr-3.7.0/htdocs/societe/societe.php
- dolibarr-3.7.0/htdocs/societe/admin/societe.php
[*] Fields affected
- Bussiness Search (search_nom) (many others can be affected)
[*] Poc
You only need to inject the script code in this field like a:
"> < img src='http://www.xxx.com >
More Info
=======
https://github.com/Dolibarr/dolibarr/issues/2857
Fixed
=======
https://github.com/GPCsolutions/dolibarr/commit/a7f6bbd316e9b96216e9b2c7a065c9251c9a8907
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 May 2015 00:00Current
6.6Medium risk
Vulners AI Score6.6
EPSS0.00307