Dolibarr < 7.0.1 Multiple Vulnerabilities

Dolibarr is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dolibarr:dolibarr"; if description...

CVE-2018-16809

Dolibarr up to 7.0.0: the expense reports module (expensereport/card.php) is vulnerable to SQL injection via integer parameters qty and value_unit due to insufficient input validation. Root cause described as an injectable SQL path in that file; impact per CVE notes is high, with a NVD CVSS v3 ba...