5 matches found
CVE-2019-25450
Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through POST parameters. Attackers can inject malicious SQL through parameters like actioncode, demandreasonid, and availabilityid in...
7.5CVSS0.0031EPSS
SaveExploits1References2
CVE-2020-7994
Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...
6.1CVSS5.9AI score0.0147EPSS
SaveExploits1References1
EUVD-2011-4261
Malware in sbrugna...
4.3CVSS6.4AI score0.02234EPSS
SaveExploits0References6
20