Dolibarr ERP and CRM contain XSS Vulnerability

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

PT-2017-13313

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the menuId parameter in the "admin/menus/edit.php" endpoint. Recommendations For Dolibarr ERP/CRM version 6.0.0, avo...

CVE-2017-14238: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-14241: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

PT-2017-13317

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to the "/htdocs/admin/menus/edit.php" API endpoint. Recommendations Fo...