4 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-9839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php type parameter. CVE-2017-9839 Note that Nessus relies on the...
CVE-2017-9839
Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php type parameter...
CVE-2017-9839
Dolibarr ERP/CRM (CVE-2017-9839) is affected by an SQL injection in versions prior to 5.0.4 via the product/stats/card.php?type parameter. The issue originates from unsafely handling the type parameter, enabling potentially unauthenticated or remote attackers to manipulate SQL queries. Impact det...
