2284 matches found
PT-2020-13390 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 11.0.4 Description: The issue allows users with the 'Setup documents directories' permission to rename uploaded files, giving them insecure file extensions. This bypasses the .noexe protection mechanism, potentially leading t...
PT-2020-13389 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 11.0.4 Description: The issue concerns the DMS/ECM module, which renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link, leading to a Cross-Site Scripting XSS...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-33669)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
Dolibarr 11.0.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Title: Dolibarr 11.0.3 Authenticated Cross Site Scripting Bug: XSS - Cross Site Scripting CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13094 Exploit-DB Author ID: 8763 Remotely Exploitable: Yes Dynamic Coding Language: PHP CVSS...
Filetto 1.0 Denial Of Service Exploit
Title: Dolibarr 11.0.3 Authenticated Cross Site Scripting Bug: XSS - Cross Site Scripting CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13094 Exploit-DB Author ID: 8763 Remotely Exploitable: Yes Dynamic Coding Language: PHP CVSSv3 Base Score: 7.4 AV:N, AC:L, PR:L, UI:N, S:C, C:L,...
CVE-2020-13094
Dolibarr before 11.0.4 allows XSS...
CVE-2020-13094
Dolibarr before 11.0.4 allows XSS...
CVE-2020-13094
Dolibarr before 11.0.4 allows XSS...
Cross site scripting
Dolibarr before 11.0.4 allows XSS...
UBUNTU-CVE-2020-13094
Dolibarr before 11.0.4 allows XSS...
CVE-2020-13094
Dolibarr ERP/CRM versions prior to 11.0.4 are affected by CVE-2020-13094 due to a cross-site scripting (XSS) vulnerability in the web UI. The issue stems from insufficient input validation, enabling an attacker to inject client-side scripts. Documented exploitation exists (e.g., remote via LDAP s...
CVE-2020-13094
Dolibarr before 11.0.4 allows XSS...
Access Restriction Bypass
Dolibarr is vulnerable to access restriction bypass. Loading of menu manager is not handled properly, therefore allowing an attacker to bypass the restrictions via the non-alphanumeric menu parameter in core/getmenudiv.php...
Dolibarr ERP/CRM Access Restriction Bypass Vulnerability
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in the core/getmenudiv.php fil...
CVE-2020-12669
core/getmenudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter...
CVE-2020-12669
core/getmenudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter...
UBUNTU-CVE-2020-12669
core/getmenudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter...
CVE-2020-12669
core/getmenudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter...