4 matches found
CVE-2024-37821
An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file...
8.8CVSS8AI score0.00754EPSS
SaveExploits0References3
SUSE CVE-2023-25727
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface...
5.4CVSS5AI score0.01163EPSS
SaveExploits0References6
20