CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

PT-2023-24393 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 16.0.0 through 16.0.4 Description: An issue in Dolibarr allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact fil...

CVE-2023-33568

Dolibarr 16.x before 16.0.5 is affected. An unauthenticated remote attacker can trigger a database dump and access the company’s entire contacts data (customers, prospects, suppliers, and employees) if a contact file exists. Root cause is insufficient access control leading to pre-auth data expos...

Metasploit Weekly Wrap-Up

Cloud Fun With EC2 New ground was broken today with the addition of two PRs from community contributor sempervictus, also known as RageLtMan, who added the ability for Metasploit to establish sessions to EC2 instances using Amazon's SSM interface, which provides a public API to execute commands o...

Code Injection

dolibarr/dolibarr is vulnerable to Code Injection. The vulnerability exists when the CMS Website plugin is enabled due to not properly check for different uppercase manipulations of ?php, which allows an attacker to inject and execute arbitrary code into the system...

CVE-2023-33568

creationtimestamp| type| source ---|---|--- 2023-05-30 15:27:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dolibarr16contactdump.rb 2023-06-13 18:15:40+00:00| seen| https://t.me/cibsecurity/65161 2023-06-20 08:10:54+00:00|...

Dolibarr vulnerable to remote code execution via uppercase manipulation

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

GHSA-9WQR-5JP4-MJMH Dolibarr vulnerable to remote code execution via uppercase manipulation

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation:...

CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

Remote code execution

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

UBUNTU-CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

Dolibarr ERP/CRM Authenticated Code Injection

Dolibarr ERP/CRM before 17.0.1 allows remote code execution by an authenticated user who has access to the Website module. The application filters lowercase use exploit/unix/http/dolibarr/cmsrcecve202330253 msf undefinedcmsrcecve202330253 show actions ...actions... msf undefinedcmsrcecve202330253...

PT-2023-22605

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 17.0.1 Zyxel ATP Series, USG FLEX Series, USG FLEX 50W Series, and USG20W-VPN Series affected versions not specified Description The issue allows remote code execution by an authenticated user via an uppercase...

CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

Dolibarr 操作系统命令注入漏洞

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in Dolibarr versions prior to 17.0.1, which stems from the ability to remotely execute code via capitalization operations...

CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

CVE-2023-30253

CVE-2023-30253 affects Dolibarr ERP/CRM versions older than 17.0.1, where an authenticated user can trigger remote code execution via an uppercase PHP tag manipulation (<?PHP vs