Dolibarr ERPCRM 3.1.0 - userindex.php Multiple SQL Injections

Dolibarr ERPCRM 3.1.0 - userindex.php Multiple SQL Injections source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generate...

Dolibarr 3.1.0 RC Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23056 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesindolibarr.html Product: Dolibarr Vendor: Dolibarr foundation http://www.dolibarr.org/ Vulnerable Version: 3.1.0 RC and probably prior Tested Version: 3.1.0 RC Vendor Notification: 02 November 2011...

Dolibarr ERPCRM 3.1.0 - userinfo.php?id SQL Injection

Dolibarr ERPCRM 3.1.0 - userinfo.php?id SQL Injection source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated conten...

Dolibarr ERPCRM 3.1.0 - adminboxes.php?rowid SQL Injection

Dolibarr ERPCRM 3.1.0 - adminboxes.php?rowid SQL Injection source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated...

Dolibarr ERPCRM 3.1 - Multiple Script URI Cross-Site Scripting Vulnerabilities

Dolibarr ERPCRM 3.1 - Multiple Script URI Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Dolibarr ERP/CRM 3.1.0 - '/admin/boxes.php?rowid' SQL Injection

source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploiting these issues could allow an attacker to...

Dolibarr ERP/CRM 3.1 - Multiple Script URI Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploiting these issues could allow an attacker to...

Dolibarr ERP/CRM 3.1.0 - '/user/info.php?id' SQL Injection

source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploiting these issues could allow an attacker to...

Dolibarr ERP/CRM 3.1.0 - '/user/index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploiting these issues could allow an attacker to...

Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0

Advisory: Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0 Advisory ID: INFOSERVE-ADV2011-03 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Dolibarr 3.1.0 other versions may also be affected Vendor URL: http://www.dolibarr.org/ Vendo...

Dolibarr 3.1.0 Cross Site Scripting

Advisory: Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0 Advisory ID: INFOSERVE-ADV2011-03 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Dolibarr 3.1.0 other versions may also be affected Vendor URL: http://www.dolibarr.org/ Vendo...

Multiple vulnerabilities in Dolibarr

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Dolibarr, which can be exploited to perform cross-site scripting & sql injection attacks. 1 Cross-Site scripting vulnerability in Dolibarr: CVE-2011-4814 1.1 Input appended to the URL after multiple files is not...

Dolibarr <= 3.0.0 Multiple Vulnerabilities - Active Check

Dolibarr is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Dolibarr ERP/CRM Detection (HTTP)

HTTP based detection of Dolibarr ERP/CRM. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103143"...

Dolibarr ERP/CRM 3.0.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.dolibarr.org/...

Dolibarr ERPCRM 3.0.0 - Multiple Vulnerabilities

Dolibarr ERPCRM 3.0.0 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.dolibarr.org/...

Dolibarr ERP/CRM 3.0.0 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.dolibarr.org/ Discovery Date..........4/21/2011 Tested...

Dolibarr ERP/CRM 3.0 - Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/47542/info Dolibarr is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

Dolibarr ERPCRM 3.0 - Local File Inclusion Cross-Site Scripting

Dolibarr ERPCRM 3.0 - Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/47542/info Dolibarr is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit...

Dolibarr 3.0.0 Local File Inclusion

------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.dolibarr.org/ Discovery Date..........4/21/2011 Tested...