Cross-site Scripting (XSS) in dolibarr/dolibarr

Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...

CVE-2023-5842 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr

Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...

PT-2022-10528 · Unknown · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM versions prior to 14.0.0 Description: An SQL Injection issue exists via a POST request to the country id parameter in an UPDATE statement. Recommendations: For versions prior to 14.0.0, update to version 14.0.0 to resolve the...

Information Disclosure

dolibarr/dolibarr is vulnerable to information disclosure. The library does not properly restrict access to the modulepart parameters, allowing an attacker to download or read any file from the directory...

CVE-2022-0731 Improper Access Control (IDOR) in dolibarr/dolibarr

Improper Access Control IDOR in GitHub repository dolibarr/dolibarr prior to 16.0...

UBUNTU-CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

UBUNTU-CVE-2019-17223

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

UBUNTU-CVE-2018-13447

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

UBUNTU-CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

Dolibarr ERP/CRM Arbitrary File Upload Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM versions...

UBUNTU-CVE-2015-3935

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...