SQL Injection

dolibarr is susceptible to multiple SQL injection vulnerabilities. The vulnerabilities exist because it does not filter the user-supplied data before using it in an SQL query, allowing the attackers to inject malicious SQL through the 1 contactid parameter in an addcontact action, 2 ligne paramet...

Cross-site Scripting (XSS)

Dolibarr is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script through the Business search field in htdocs/societe/societe.php or htdocs/societe/admin/societe.php...

Arbitrary Code Execution

dolibarr is vulnerable to arbitrary code execution attacks. Low-privilege users were able to upload .exe files to the application, these files would be executed in the context of the application...

Dolibarr ERP/CRM Arbitrary File Upload Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM versions...

Dolibarr < 5.0.4 RCE Vulnerability

Dolibarr allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Code injection

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

UBUNTU-CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM prior to 5.0.3 is vulnerable to arbitrary code execution via an insecure file upload mechanism. The issue affects the Dolibarr web application where low-privilege users can upload dangerous file types, allowing code execution within the vulnerable application’s context. The provi...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2017-11315)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the user/index.php fil...

Dolibarr < 5.0.3 SQLi Vulnerability

Dolibarr is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dolibarr:dolibarr";...

SQL Injection

Dolibarr is vulnerable to SQL Injection. A malicious user can inject arbitrary SQL commands in the ser/index.php page through the searchsupervisor and searchstatut parameters...

CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

Sql injection

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...

CVE-2017-9435

CVE-2017-9435 affects Dolibarr ERP/CRM prior to 5.0.3. It is a SQL injection vulnerability in user/index.php (parameters search_supervisor and search_statut). The issue allows attackers to manipulate SQL queries (as described across connected documents). No explicit exploit details or patch info ...