Dolibarr < 6.0.5 Multiple Vulnerabilities

Dolibarr is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dolibarr:dolibarr"; if description...

CVE-2017-17900

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

CVE-2017-17900

CVE-2017-17900 affects Dolibarr ERP/CRM 6.0.4, where a SQL injection is possible in fourn/index.php via the socid parameter, allowing remote execution of arbitrary SQL commands. Multiple connected sources corroborate the same vector and impact. Exploitation context is network-based with high seve...