CVE-2022-0819 Code Injection in dolibarr/dolibarr

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...

PT-2022-13446 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: dolibarr/dolibarr versions prior to 15.0.1 Description: The issue is related to code injection in the dolibarr/dolibarr GitHub repository. It involves improper sanitization of PHP functions, which can lead to the injection of arbitrary PHP co...

Dolibarr 安全漏洞

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in Dolibarr versions prior to 15.0.1, which stems from the lack of handling of user-submitted data in the software and can be exploited by an attacker to...

Dolibarr code issue vulnerability

Dolibarr is an application. A modern software package that helps manage your organization's activities. a code issue vulnerability exists in Dolibarr that stems from a Business logic error in the product. No details of the vulnerability are currently available...

Code Injection

Description Improper php function sanitization, lead to an ability to inject arbitrary PHP code and run arbitrary commands on file system. In the function "doleval" in file "dolibarr/htdocs/core/lib/functions.lib.php" dangerous PHP functions are sanitized using "strreplace" and can be bypassed...

Privilege Escalation

dolibarr/dolibarr is vulnerable to privilege escalation. Low privileged attacker is able to update their login name which should only be updated by admin allowing the attacker to gain access to sensitive information and elevate privileges...

Logic error in dolibarr/dolibarr

In dolibarr/dolibarr prior to 16.0 any low privileged users could update their login name which should only be updated by admin...

GHSA-8VQ6-5F66-HP3R Logic error in dolibarr/dolibarr

In dolibarr/dolibarr prior to 16.0 any low privileged users could update their login name which should only be updated by admin...

CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

UBUNTU-CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

CVE-2022-0746

CVE-2022-0746 affects dolibarr/dolibarr prior to 16.0 and is described as a business-logic error. Connected records (GHSA-8VQ6-5F66-HP3R) indicate that, prior to 16.0, low-privilege users could update their login name, which should be admin-only. The provided documents do not specify a concrete e...

CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

Dolibarr 安全漏洞

Dolibarr is an application. A modern software package that helps manage your organization's activities. a code issue vulnerability exists in Dolibarr that stems from a Business logic error in the product. No details of the vulnerability are currently available...

PT-2022-13406 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: dolibarr/dolibarr versions prior to 16.0 Description: The issue concerns business logic errors in the dolibarr/dolibarr GitHub repository. Specifically, it allows low-privileged users to update their login name, a functionality that should be...

Information Disclosure

dolibarr/dolibarr is vulnerable to information disclosure. The library does not properly restrict access to the modulepart parameters, allowing an attacker to download or read any file from the directory...

GHSA-4XC7-X2JR-CR74 Improper Authorization in dolibarr/dolibarr

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...

Improper Authorization in dolibarr/dolibarr

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...