Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/04/12 12:28 p.m.57 views

CVE-2019-25710 Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter

Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malicious SQL code through the rowid POST parameter to extract sensitive database information using...

8.8CVSS0.00311EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/04/12 12:0 a.m.14 views

PT-2026-32172

Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malicious SQL code through the rowid POST parameter to extract sensitive database information using...

8.8CVSS6.2AI score0.00311EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/12 12:0 a.m.10 views

Dolibarr ERP CRM SQL注入漏洞

Dolibarr ERP CRM is an open-source enterprise and sales management system developed by Dolibarr. Version 8.0.4 of Dolibarr ERP CRM contains a SQL injection vulnerability. This vulnerability stems from insufficient input validation for the rowid parameter in the admin dict.php file, which may lead...

9.1CVSS5.8AI score0.00311EPSS
SaveExploits1References4
Rows per page
Query Builder