CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2023/09/20 1:15 a.m.•31 views

CVE-2023-38888

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...

9.6CVSS9.2AI score0.01109EPSS

Exploits1References1

UbuntuCve•added 2023/09/20 1:15 a.m.•17 views

CVE-2023-38888

9.6CVSS7.3AI score0.01109EPSS

Exploits1References3

CVE•added 2023/09/20 12:0 a.m.•2520 views

CVE-2023-38888

CVE-2023-38888 is a Cross Site Scripting vulnerability affecting Dolibarr ERP/CRM (v17.0.1 and earlier) exposed via the REST API module. The issue is tied to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject, enabling a remote attacker to obtain sensitive information and execute arb...

9.6CVSS9AI score0.01109EPSS

Exploits1References1Affected Software1