CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2023/09/20 1:15 a.m.•39 views

CVE-2023-38888

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...

9.6CVSS9.2AI score0.0128EPSS

SaveExploits1References1

UbuntuCve•added 2023/09/20 1:15 a.m.•23 views

CVE-2023-38888

9.6CVSS7.3AI score0.0128EPSS

SaveExploits1References3

OSV•added 2023/09/20 12:00 a.m.•37 views

CVE-2023-38888

7.2AI score

SaveExploits0References3

CVE•added 2023/09/20 12:00 a.m.•2546 views

CVE-2023-38888

CVE-2023-38888 is a Cross Site Scripting vulnerability affecting Dolibarr ERP/CRM (v17.0.1 and earlier) exposed via the REST API module. The issue is tied to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject, enabling a remote attacker to obtain sensitive information and execute arb...

9.6CVSS9AI score0.0128EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by