CVE-2019-11200

Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. However, the application performs insufficient checks on the export parameters to mysqldump, which can lead to execution of arbitrary binaries on the server. Malicious binaries can be...

CVE-2019-11200

Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. However, the application performs insufficient checks on the export parameters to mysqldump, which can lead to execution of arbitrary binaries on the server. Malicious binaries can be...

CVE-2019-11200

CVE-2019-11200 affects Dolibarr ERP/CRM 9.0.1. The vulnerability arises from insufficient checks on export parameters to mysqldump used during database backup, allowing execution of arbitrary binaries on the server. Malicious binaries could be uploaded via other Dolibarr functionalities. Multiple...