3465 matches found
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
Design/Logic Flaw
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
Sql injection
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
Cross site scripting
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
UBUNTU-CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
UBUNTU-CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS. Root cause: improper input filtering. Affected product: Dolibarr ERP/CRM (versions
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
CVE-2019-19210
Dolibarr ERP/CRM vulnerable to Cross‑Site Scripting prior to version 10.0.3. The root cause is that uploaded HTML documents are served as text/html even after being renamed to .noexe files, enabling an attacker to inject and execute script in the victim’s browser. The vulnerability affects Doliba...