Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-18398)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2020-21501)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2020-18399)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...

Cross-site Scripting (XSS)

Dolibarr/dolibarr is vulnerable to cross-site scripting attack. The vulnerability exists as the value of the qty parameter is not escaped before being displayed on a user's browser in product/fournisseurs.php, allowing an attacker to inject and execute arbitrary Javascript in a user's browser via...

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-21491)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in the user/card.p...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

Cross site scripting

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

UBUNTU-CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

CVE-2019-19212

Vulnerability summary (CVE-2019-19212) : Dolibarr ERP/CRM versions 3.0 through 10.0.3 are affected by a cross-site scripting (XSS) flaw in the qty parameter on the product/fournisseurs.php (product price screen). The root cause is an XSS issue in the handling of this parameter leading to script e...

CVE-2019-19209

Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...

CVE-2019-19210

Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...

CVE-2019-19211

Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...

CVE-2019-19209

Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...

CVE-2019-19211

Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...

CVE-2019-19210

Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...

CVE-2019-19210

Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...

Sql injection

Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...