Lucene search
+L

1 matches found

Packet Storm
Packet Storm
added 2026/04/08 12:0 a.m.138 views

📄 Dolibarr 23.0.0 dol_eval_standard() Whitelist Bypass

Dolibarr version 23.0.0 bypass proof of concept exploit. The whitelist mode of dolevalstandard does not apply $forbiddenphpstrings checks, and the function-call regex does not detect PHP dynamic callable syntax. This allows 'exec''cmd' to bypass all validation and reach eval. !/usr/bin/env python...

8.6CVSS5.9AI score0.15527EPSS
SaveExploits2
Rows per page
Query Builder