2309 matches found
CVE-2021-36625
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
CVE-2021-36625
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
CVE-2021-36625
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
CVE-2021-36625
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
UBUNTU-CVE-2021-36625
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
Sql injection
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
CVE-2021-37517
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service...
CVE-2021-37517
Dolibarr ERP/CRM 13.0.2 is affected by CVE-2021-37517, an Access Control vulnerability in the forgot-password flow where email addresses can be used as usernames, enabling Denial of Service. Root cause: insufficient validation in forgot-password authentication. Impact: Denial of Service. Remediat...
CVE-2021-36625
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
CVE-2021-36625
Dolibarr ERP/CRM 13.0.2 is affected by an SQL Injection via a POST to the country_id parameter in an UPDATE statement. The vulnerability is documented as fixed in version 14.0.0. Public details (NVD/NVD-derived references) indicate CVSSv3.1 base score 8.8 (HIGH) with attack vector NETWORK and no ...
Dolibarr ERP/CRM SQL注入漏洞
Dolibarr ERP/CRM is a web-based enterprise resource planning ERP and customer relationship management CRM system from the French Dolibarr Foundation. The system can be used to manage products, inventory, invoices, orders, etc. A SQL injection vulnerability exists in Dolibarr ERP/CRM, which stems...
PT-2022-10655 · Unknown · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM versions 13.0.2 through 13.0.2 Description: An Access Control issue exists in the forgot-password function because the application allows email addresses as usernames, which can cause a Denial of Service. The issue is related...
PT-2022-10528 · Unknown · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM versions prior to 14.0.0 Description: An SQL Injection issue exists via a POST request to the country id parameter in an UPDATE statement. Recommendations: For versions prior to 14.0.0, update to version 14.0.0 to resolve the...
Dolibarr ERP/CRM 安全漏洞
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM 13.0.2,...
Remote Code Execution
dolibarr/dolibarr is vulnerable to remote code execution. The vulnerability exists in doleval function of dolibarr/htdocs/core/lib/functions.lib.php because the strings are not properly sanitized which allows an attacker to inject and execute crafted malicious PHP commands on the file system...
Code injection in dolibarr/dolibarr
Improper php function sanitization, lead to an ability to inject arbitrary PHP code and run arbitrary commands on file system. In the function "doleval" in file "dolibarr/htdocs/core/lib/functions.lib.php" dangerous PHP functions are sanitized using "strreplace" and can be bypassed using followin...
CVE-2022-0819
Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...
CVE-2022-0819
Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...