CVE-2023-5323

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

UBUNTU-CVE-2023-5323

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

CVE-2023-5323

Dolibarr ERP/CRM (repository dolibarr/dolibarr) is affected by a Cross-site Scripting (XSS) vulnerability described as generic in the project prior to version 18.0. The connected sources (e.g., OSV:BIT-DOLIBARR-2023-5323, NVD/NVD-derived records, GHSA listings) confirm the same vulnerability clas...

CVE-2023-5323 Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

CVE-2023-5323 Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

CVE-2023-5323 Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

Dolibarr Cross-Site Scripting Vulnerability

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A cross-site scripting vulnerability exists in Dolibarr versions prior to 18.0 that stems from the presence of a cross-site scripting XSS vulnerability...

PT-2023-32042 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: dolibarr/dolibarr versions prior to 18.0 Description: The issue is related to Cross-site Scripting XSS - Generic. Recommendations: For versions prior to 18.0, update to version 18.0 or later to resolve the issue...

GHSA-6773-RFJV-C54W Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script...

GHSA-G8H7-MCP6-PF47 File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

GHSA-62WF-H26V-5M57 Cross Site Scripting vulnerability in Dolibarr ERP CRM

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...

Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script...

Cross Site Scripting vulnerability in Dolibarr ERP CRM

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...

File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

CVE-2023-38886

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script...

CVE-2023-38888

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...

CVE-2023-38888

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

CVE-2023-38886

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script...