Lucene search
+L

259 matches found

Github Security Blog
Github Security Blog
•added 2026/05/03 12:30 p.m.•27 views

Dolibarr has an Injection issue

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS5AI score0.00274EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/05/03 12:30 p.m.•24 views

GHSA-RVWR-Q5HJ-WQ7G Dolibarr has an Injection issue

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS5AI score0.00274EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/03 9:15 a.m.•13 views

CVE-2026-7688 Dolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS5AI score0.00274EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/03 9:15 a.m.•14 views

CVE-2026-7688

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS5AI score0.00274EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/05/03 9:15 a.m.•75 views

CVE-2026-7688

Dolibarr ERP CRM (up to 23.0.2) contains a SQL injection in Shipments API Endpoint, via _checkValForAPI in htdocs/expedition/class/expedition.class.php. The vulnerability allows remote access with high attack complexity and LOW impact on confidentiality/integrity/availability; exploit maturity is...

5CVSS5AI score0.00274EPSS
SaveExploits0References3
Mend
Mend
•added 2026/05/03 9:15 a.m.•7 views

CVE-2026-7688

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS5AI score0.00274EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/03 9:15 a.m.•72 views

CVE-2026-7688 Dolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS0.00274EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/03 12:00 a.m.•40 views

PT-2026-36692

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS5AI score0.00274EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/03 12:00 a.m.•9 views

CVE-2026-7688: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...

5CVSS5AI score0.00274EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2019-10128

Malware in sbrugna...

4.8CVSS5.7AI score0.01063EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2020-12767

Malware in sbrugna...

8.8CVSS7.5AI score0.0051EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2019-10126

Malware in sbrugna...

4.8CVSS5.7AI score0.01063EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2019-10127

Malware in sbrugna...

4.8CVSS5.7AI score0.01063EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2019-10124

Malware in sbrugna...

5.4CVSS6.1AI score0.00611EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-2220

Malware in sbrugna...

7.5CVSS7.3AI score0.0216EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2019-10131

Malware in sbrugna...

5.4CVSS6AI score0.00622EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-49959

Malicious code in bioql PyPI...

7CVSS6.6AI score0.0067EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-1502

Malicious code in bioql PyPI...

6.9CVSS8.8AI score0.13189EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-1501

Malicious code in bioql PyPI...

7CVSS8.8AI score0.0035EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-1500

Malicious code in bioql PyPI...

9.2CVSS9.2AI score0.00614EPSS
SaveExploits0References1
Rows per page
Query Builder