Lucene search
+L

2619 matches found

Kitploit
Kitploit
•added 2026/09/28 4:48 a.m.•11 views

DolibabyPhp

DolibabyPhp Un exploit de RCE autenticado para Dolibarr ERP/CRM CVE-2023-30253. Instalación Puedes instalar el paquete desde el repositorio PyPi con pip o clonar el código fuente directamente desde GitHub con git clone. root@kitploit: pip install dolibabyphp Uso root@kitploit: Usage: dolibabyphp...

8.8CVSS7.9AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/28 2:33 a.m.•14 views

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC Descripción Esta es mi PoC para el CVE-2023-30253 Dolibarr 17.0.0 inyección de código PHP. Cuando el plugin CMS Website núcleo está habilitado, un atacante autenticado puede obtener ejecución remota de comandos mediante una inyección de código PHP que evade las...

8.8CVSS8.1AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/27 4:38 p.m.•11 views

CVE-2023-30253-Exploit

Exploit CVE-2023-30253 Dolibarr vulnerable a ejecución remota de código mediante manipulación de mayúsculas Versión afectada 17.0.1 Uso: pip3 install -r requirements.txt python3 CVE-2023-30253.py...

8.8CVSS8AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/27 12:11 p.m.•13 views

Dolibarr-17.0.0-Exploit-CVE-2023-30253

Readme.md CVE-2023-30253 CVE-2023-30253 es una vulnerabilidad de seguridad en el software Dolibarr que permite a usuarios autenticados ejecutar código remoto mediante una técnica de manipulación de mayúsculas en datos inyectados. Impacto Esta vulnerabilidad puede provocar la ejecución remota de...

8.8CVSS8AI score0.82094EPSS
SaveExploits16References1
Kitploit
Kitploit
•added 2026/09/27 4:05 a.m.•12 views

CSRF-breach

Security breach project - Cross Site Request Forgery Dolibarr 7.0.0 está afectado por: Cross Site Request Forgery CSRF. El impacto es: permite que HTML malicioso cambie la contraseña del usuario, deshabilite usuarios y deshabilite el cifrado de contraseñas. El componente es: Función de cambio de...

6AI score
SaveExploits0
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•161 views

Dolibarr ERP CMS `list.php` - SQL Injection

Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. id: CVE-2024-5315 info: name: Dolibarr ERP CMS list.php - SQL Injection author: rootxharsh,iamnoooob,pdresearch severity: critical description: | Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0....

9.1CVSS8.2AI score0.34522EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•18 views

Dolibarr <=22.0.4 - Local File Inclusion

Dolibarr = 22.0.4 contains a local file inclusion caused by manipulation of the objectdesc parameter and a fail-open logic flaw in restrictedArea in /core/ajax/selectobject.php, letting authenticated users with no specific privileges read arbitrary non-PHP files. id: CVE-2026-34036 info: name:...

6.5CVSS5.9AI score0.01468EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•59 views

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the 1 file parameter to document.php or 2 backtopage parameter in a create action to comm/action/fiche.php. id:...

7.5CVSS6.4AI score0.251EPSS
SaveExploits3References5
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•127 views

Dolibarr Unauthenticated Contacts Database Theft

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. id: CVE-2023-33568 info: name: Dolibarr Unauthenticated Contacts Database Theft...

7.5CVSS7.3AI score0.1494EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•55 views

Dolibarr <7.0.2 - Cross-Site Scripting

Dolibarr before 7.0.2 is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. id: CVE-2018-10095 info: name: Dolibarr 7.0.2 - Cross-Site Scripting author: pikpikcu severity: medium...

6.1CVSS6.9AI score0.86988EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2026/09/26 5:11 p.m.•13 views

POC-exploit-for-Dolibarr

Exploit POC para Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost...

8.8CVSS8.2AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/26 1:47 p.m.•15 views

CVE-2020-13094

Título: Dolibarr 11.0.3 - Cross-Site Scripting Persistente Autor: Mehmet Kelepce / Gais Cyber Security Fecha: 2020-04-14 Proveedor: https://www.dolibarr.org/ ID de autor en Exploit-DB: 8763 Explotable remotamente: Sí Lenguaje de programación dinámica: PHP Puntuación base CVSSv3: 7.4 AV:N, AC:L,...

5.4CVSS6AI score0.01145EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/26 12:49 p.m.•7 views

CVE-2026-89013

CVE-2026-89013 — Dolibarr hashp=shared Authorization Bypass Exploit for CVE-2026-89013: document.php and viewimage.php force NOLOGIN when the hashp parameter is present. The internal marker value shared skips share-token resolution, but the access-control override still fires for any non-empty...

8.7CVSS6AI score0.00496EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/26 12:06 p.m.•6 views

CVE-2026-89012

CVE-2026-89012 — Dolibarr SQL Filter Denylist Bypass Exploit for CVE-2026-89012: the forbidden-fields denylist in forgeSQLFromUniversalSearchCriteria introduced with the CVE-2026-71510 fix uses a case-sensitive inarray while the operand charset allows A-Z. Since SQL column resolution is...

7.1CVSS6AI score0.00465EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/24 11:47 p.m.•7 views

CVE-2026-78804_Dolibarr_authenticated_SQL_injection

Dolibarr — Authenticated SQL Injection PoC SQL injection affecting the product stock management functionality through the seuilstockalerte parameter. Affected Versions Tested and confirmed on: 19.0.4 20.0.4 21.0.4 22.0.5 23.0.3 24.0.0 It was working until the report. Vulnerable Parameter...

6.1AI score
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 5:06 p.m.•11 views

CVE-2026-34036

CVE-2026-34036 Proof-of-concept script for CVE-2026-34036 , an authenticated local file inclusion / LFI in Dolibarr. The issue is reachable through core/ajax/selectobject.php. An authenticated user can abuse the objectdesc parameter to make the application read arbitrary local files on the server...

6.5CVSS6.2AI score0.01468EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 3:08 p.m.•8 views

CVE-2026-23500

CVE-2026-23500: Inyección de comandos del sistema operativo RCE a través de la configuración MAINODTASPDF en Dolibarr Información general...

9.4CVSS5.9AI score0.00922EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 3:07 p.m.•9 views

DOLIBARR-RCE-CVE-2026-22666

Este repositorio no tiene un README...

8.6CVSS5.8AI score0.15527EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 2:06 p.m.•6 views

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution PHP code injection exploit for Dolibarr ERP/CRM v17.0.0 that allows obtaining a reverse shell as www-data user via the Website/CMS module. ⚠️ For educational purposes and authorized audits only. 📑 Table of Contents What is...

8.8CVSS7.9AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/22 6:44 p.m.•9 views

Exploit-for-Dolibarr-17.0.0-CVE-2023-30253

Exploit POC para Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost...

8.8CVSS8.2AI score0.82094EPSS
SaveExploits16
Rows per page
Query Builder