2313 matches found
CVE-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE
Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...
CVE-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE
Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...
CVE-2023-4197
Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...
Dolibarr ERP/CRM Security Breach
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders and more. A security vulnerability exists in Dolibarr ERP/CRM v18.0.1 and...
CVE-2023-4198
Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...
PT-2023-28200 · Unknown · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions = 17.0.3 Description: The issue allows an unauthorized authenticated user to read a database table containing customer data due to improper access control. Recommendations: For versions = 17.0.3, update to a version...
Dolibarr ERP/CRM Security Breach
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders and more. A security vulnerability exists in Dolibarr ERP/CRM v17.0.3 and...
PT-2023-28198 · Unknown · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions = 18.0.1 Description: The issue is related to improper input validation, which fails to strip certain PHP code from user-supplied input when creating a Website. This allows an attacker to inject and evaluate arbitrar...
Cross-site Scripting (XSS)
dolibarr/dolibarr is vulnerable to Cross-site Scripting XSS. An attacker is able to exploit this vulnerability by tricking a user into clicking on a malicious link or opening a malicious file. The malicious link or file would contain a specially crafted XSS payload that would be injected into the...
Cross-site Scripting (XSS) in dolibarr/dolibarr
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
CVE-2023-5842
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
CVE-2023-5842 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
CVE-2023-5842
CVE-2023-5842 concerns a stored XSS in the Dolibarr project (dolibarr/dolibarr) prior to version 16.0.5. Public references corroborate the XSS impact and identify 16.0.5 as the fix version. The connected documents do not provide explicit exploitation details. Remediation: upgrade to Dolibarr 16.0...
Dolibarr Cross-Site Scripting Vulnerability
Dolibarr is a software application. A modern software package that helps manage your organization's activities. A cross-site scripting vulnerability exists in Dolibarr versions prior to 16.0.5, which stems from the presence of a stored cross-site scripting XSS vulnerability...
PT-2023-32373 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: dolibarr/dolibarr versions prior to 16.0.5 Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the website, which will be executed by other users' browsers. The...
CVE-2023-5842
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
GHSA-39M3-CJ8C-886R Dolibarr Cross-site Scripting vulnerability
Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.0...
Dolibarr Cross-site Scripting vulnerability
Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.0...
