EUVD-2022-3334

Malicious code in bioql PyPI...

SQL Injection

Dolibarr is vulnerable to SQL injection attacks. The attacks exist because it does not properly sanitize the viewstatut and propalstatut aka searchstatut parameters in comm/propal/list.php, allowing the authenticated user to inject arbitrary SQL code through it...

CVE-2017-18260

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php viewstatut parameter or comm/propal/list.php propalstatut parameter, aka searchstatut parameter...

CVE-2017-18260

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php viewstatut parameter or comm/propal/list.php propalstatut parameter, aka searchstatut parameter...

PT-2018-6785

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM versions prior to 7.0.0 Description: The issue affects Dolibarr ERP/CRM, where multiple SQL injection vulnerabilities have been identified. These vulnerabilities can be exploited via the "comm/propal/list.php" endpoint,...

CVE-2017-18260: Improper Neutralization of Special Elements used in an SQL Command

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php viewstatut parameter or comm/propal/list.php propalstatut parameter, aka searchstatut parameter...