Dolibarr ERPCRM 3.x - adherentsfiche.php SQL Injection

Dolibarr ERPCRM 3.x - adherentsfiche.php SQL Injection source: https://www.securityfocus.com/bid/51956/info Dolibarr is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

Dolibarr ERP/CRM 3.x - '/adherents/fiche.php' SQL Injection

source: https://www.securityfocus.com/bid/51956/info Dolibarr is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=427 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=427 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=428 Release Date: ============= 2012-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 42...

Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=428 Release Date: ============= 2012-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 42...

Dolibarr < 3.1RC3 Multiple Vulnerabilities - Active Check

Dolibarr is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-4814

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 admin/boxes.php, 3 comm/clients.php, 4 commande/index.php; and the optioncss parameter to 5 admin/ihm.php an...

CVE-2011-4802

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...

Sql injection

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 admin/boxes.php, 3 comm/clients.php, 4 commande/index.php; and the optioncss parameter to 5 admin/ihm.php an...

PT-2011-5120 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 3.1.0 RC and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved by manipulating the PATH INFO to...

PT-2011-5108 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 3.1.0 RC and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via several parameters in different PHP files, including sortfield, sortorder, and sall...

CVE-2011-4814

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 admin/boxes.php, 3 comm/clients.php, 4 commande/index.php; and the optioncss parameter to 5 admin/ihm.php an...

CVE-2011-4814

Dolibarr

CVE-2011-4802

Dolibarr

CVE-2011-4802

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...

CVE-2011-4329

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...

CVE-2011-4329

Dolibarr 3.1.0 is affected by multiple XSS vulnerabilities. The issue arises from improper sanitization of parameters, allowing an attacker to inject arbitrary HTML/JavaScript via the username parameter in a setup action to admin/company.php or via PATH_INFO to admin/security_other.php, admin/eve...