CVE-2023-4197

CVE-2023-4197 questo è un semplice script da CVE-2023-4197 che è stato leggermente modificato perché non funzionava al primo tentativo con la macchina broadlight di HTB, il che significa che dobbiamo modificare un po' lo script e poi usarlo come dice la documentazione...

CVE-2023-4197

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197

creationtimestamp| type| source ---|---|--- 2023-11-01 11:26:30+00:00| seen| https://t.me/cibsecurity/73302 2025-05-22 16:51:14+00:00| seen| https://gist.github.com/falconwebsites/099fbf1928b96af4c5e40d257675ebab...

CVE-2023-4197

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197

Dolibarr ERP/CRM (

CVE-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...