3357 matches found
CVE-2017-14238: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...
PT-2017-13316
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A sensitive information disclosure issue exists in document.php via the file parameter. Recommendations For version 6.0.0, update to a newer version that contains a fix for this issue...
CVE-2017-14239: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 CompanyName, 2 CompanyAddress, 3 CompanyZip, 4 CompanyTown, 5 Fax, 6 EMail, 7 Web, 8 ManagingDirectors, 9 Note, 10 Capital, 11 ProfId1, 12...
PT-2017-13317
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to the "/htdocs/admin/menus/edit.php" API endpoint. Recommendations Fo...
PT-2017-13313
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the menuId parameter in the "admin/menus/edit.php" endpoint. Recommendations For Dolibarr ERP/CRM version 6.0.0, avo...
Odoo OAuth Session Hijacking Vulnerability
Odoo formerly known as OpenERP is a product of the Belgian company Odoo, an Enterprise Resource Planning ERP and Customer Relationship Management CRM system; Odoo Community Edition is its Community Edition; Odoo Enterprise Edition is its Enterprise Edition; the OAuth module is one of the Open Web...
Oracle JD Edwards EnterpriseOne Tools Remote Vulnerability
Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle, providing financial management, project management, and asset lifecycle management applications.JD Edwards EnterpriseOne Tools is one of the tool components. A security vulnerabili...
Code injection
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
UBUNTU-CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840
Dolibarr ERP/CRM prior to 5.0.3 is vulnerable to arbitrary code execution via an insecure file upload mechanism. The issue affects the Dolibarr web application where low-privilege users can upload dangerous file types, allowing code execution within the vulnerable application’s context. The provi...
PT-2017-19210
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions 5.0.3 and prior Description The issue allows low-privilege users to upload files of dangerous types, potentially resulting in arbitrary code execution within the context of the vulnerable application. Recommendations...
CVE-2017-9840: Unrestricted Upload of File with Dangerous Type
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
Sql injection
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
