4 matches found
CVE-2024-37821
An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file...
8.8CVSS7.5AI score0.00754EPSS
SaveExploits0References1
CVE-2024-37821
An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file...
8.8CVSS7.4AI score0.00754EPSS
SaveExploits0References3
CVE-2024-37821
Dolibarr ERP/CRM up to v19.0.1 contains an arbitrary file upload vulnerability in the Upload Template function. The issue arises from improper validation of file types, allowing a crafted .SQL file to execute arbitrary code. Affected component: Upload Template/file upload handling; impact is arbi...
8.8CVSS8AI score0.00754EPSS
SaveExploits0References1Affected Software1
20