CVE-2019-25710

CVE-2019-25710 affects Dolibarr ERP-CRM 8.0.4, where the rowid parameter in admin/dict.php is vulnerable to SQL injection. The issue allows an attacker to inject SQL via the rowid POST parameter and potentially read sensitive data from the database (error-based injection noted). Public sources in...

EUVD-2007-2927

Malware in sbrugna...

CVE-2007-2935

CVE-2007-2935 affects Fundanemt prior to 2.2.0.1. The vulnerability is in core/spellcheck/spellcheck.php where the dict parameter can be tainted with shell metacharacters, allowing remote command execution. Root cause is unsanitized input reaching a shell/command path; impact is remote arbitrary ...

CVE-2007-2935: Undefined Security Weakness

core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dict parameter...