2284 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...
CVE-2020-7994
Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...
CVE-2020-7995
The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts...
UBUNTU-CVE-2020-7996
htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header...
UBUNTU-CVE-2020-7994
Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...
CVE-2020-7994
Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...
CVE-2020-7994
Dolibarr 10.0.6 contains multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary script/HTML via these input parameters on admin pages: label[libelle] (dict.php?id=3), name[constname] (const.php?mainmenu=home), note[note] (dict.php?id=10), zip[MAI...
CVE-2020-7995
CVE-2020-7995 affects Dolibarr ERP/CRM 10.0.6. The vulnerability is an unlimited rate of failed authentication attempts on the login page (h t d o c s / index.php? mainmenu=home), indicating missing login-rate limiting and enabling brute-force attacks. Public exploit references exist (e.g., Dolib...
CVE-2020-7995
The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts...
CVE-2020-7996
htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header...
CVE-2020-7996
Dolibarr ERP/CRM version 10.0.6 contains a cross-site scripting (XSS) flaw in htdocs/user/passwordforgotten.php that can be triggered via the Referer HTTP header. The available sources consistently describe this vulnerability as an XSS issue in the Referer header handling, with no publicly docume...
PT-2020-19907 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.6 Description: The issue allows for XSS via the Referer HTTP header in the htdocs/user/passwordforgotten.php file. Recommendations: For Dolibarr version 10.0.6, consider disabling access to the...
PT-2020-19906 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.6 Description: The issue concerns the htdocs/index.php?mainmenu=home login page, which allows an unlimited rate of failed authentication attempts. This could potentially lead to brute-force attacks. Recommendations: For...
PT-2020-19905 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.6 Description: Multiple cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via various parameters to different pages, including the labellibelle parameter to the...
Dolibarr <= 10.0.2 Multiple Vulnerabilities
Dolibarr is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dolibarr:dolibarr"; ifdescription...
Dolibarr <= 10.0.3 Stored XSS Vulnerability
Dolibarr is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Dolibarr <= 9.0.5 Multiple Vulnerabilities
Dolibarr is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dolibarr:dolibarr"; ifdescription...
Cross-site Scripting (XSS)
dolibarr/dolibarr is vulnerable to cross-site scripting XSS. The vulnerability exists as it is possible to upload a SVG with a XSS payload and cause the script to be executed when rendered in viewimage.php...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-45129)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr CRM/ER...