CVE-2023-4197

CVE-2023-4197 este es un script simple de CVE-2023-4197 que fue modificado un poco desde entonces porque no funcionó a la primera con la máquina broadlight de HTB, lo que significa que tenemos que modificar un poco el script y luego usarlo como dice la documentación...

CVE-2023-4197

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197

creationtimestamp| type| source ---|---|--- 2023-11-01 11:26:30+00:00| seen| https://t.me/cibsecurity/73302 2025-05-22 16:51:14+00:00| seen| https://gist.github.com/falconwebsites/099fbf1928b96af4c5e40d257675ebab...

CVE-2023-4197

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197

Dolibarr ERP/CRM (

CVE-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

CVE-2023-4197

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...