2284 matches found
Cross site scripting
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
UBUNTU-CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
UBUNTU-CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
Design/Logic Flaw
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
UBUNTU-CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS. Root cause: improper input filtering. Affected product: Dolibarr ERP/CRM (versions
CVE-2019-19210
Dolibarr ERP/CRM vulnerable to Cross‑Site Scripting prior to version 10.0.3. The root cause is that uploaded HTML documents are served as text/html even after being renamed to .noexe files, enabling an attacker to inject and execute script in the victim’s browser. The vulnerability affects Doliba...
CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
CVE-2019-19209
CVE-2019-19209 affects Dolibarr ERP/CRM prior to 10.0.3, where a SQL Injection flaw exists in the Dolibarr ERP/CRM software. The connected documents consistently describe the vulnerability as a SQL injection in that product/version without detailing exploit vectors, impact scope, or mitigation st...
Cross-site Scripting (XSS)
dolibarr is vulnerable to cross-site scripting XSS. The attack exists because it does not properly HTML encoded to sanitize $SERVER"HTTPREFERER" arguments, allowing an attacker to inject and execute malicious script...
Dolibarr Cross-Site Scripting Vulnerability (CNVD-2020-10498)
Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...
CVE-2020-9016
Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header...
CVE-2020-9016
Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header...
Design/Logic Flaw
Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header...