4 matches found
CVE-2024-37821
An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file...
8.8CVSS7.5AI score0.0076EPSS
SaveExploits0References1
CVE-2024-37821
An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file...
8.8CVSS7.4AI score0.0076EPSS
SaveExploits0References3
CVE-2024-37821
Dolibarr ERP CRM versions up to v19.0.1 are susceptible to an arbitrary file upload vulnerability within the Upload Template function. The root cause is the improper validation of file types , which allows an attacker to upload a crafted .SQL file to achieve arbitrary code execution . Practical c...
8.8CVSS8AI score0.0076EPSS
SaveExploits0References1Affected Software1
20