2313 matches found
PT-2023-15920 · Dolibarr · Dolibarr Module Quicksupplierprice
Name of the Vulnerable Software and Affected Versions: dolibarr module quicksupplierprice versions up to 1.1.6 Description: A critical issue has been found in the affected software, allowing for sql injection through the manipulation of the upatePrice function in the script/interface.php file. Th...
ATM Consulting dolibarr_module_quicksupplierprice SQL注入漏洞
dolibarrmodulequicksupplierprice is an open source application from ATM Consulting. Allows to quickly add supplier prices directly from the supplier order . ATM Consulting dolibarrmodulequicksupplierprice 1.1.6 and earlier versions have a SQL injection vulnerability that stems from a problem with...
Dolibarr 16 pre-auth contact database dump
Dolibarr version 16 use auxiliary/scanner/http/dolibarr/16contactdump msf undefined16contactdump show actions ...actions... msf undefined16contactdump set ACTION msf undefined16contactdump show options ...show and set options... msf undefined16contactdump run This module requires Metasploit:...
Stored XSS
Description A Cross-Site Scripting XSS vulnerability exists in Dolibarr before 16.0.4 via the ticket creation flow. Exploitation requires that an admin change the value of the box using "onbeforeinput" event. In the worst case, the victim who inadvertently triggers the attack is a highly privileg...
DynamicPHPCode Filtering Bypass leads to Remote Code Execution
Description The "Websites" module in Dolibarr CRM version 6.0.3 and below has "checkPHPCode" function check to ensure that the page not contains any malicious function. However, this funtion only check by using match word searching, that allows malicious authenticated user can bypass by using...
Cross site request forgery (csrf)
A vulnerability was found in dolibarrprojecttimesheet up to 4.5.5. It has been declared as problematic. This vulnerability affects unknown code of the component Form Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. Upgrading to version 4.5.6.a i...
dolibarr_project_timesheet 跨站请求伪造漏洞
dolibarrprojecttimesheet is a Dolibarr project timesheet view by Patrick Delcroix Personal Developer. A cross-site request forgery vulnerability exists in dolibarrprojecttimesheet versions prior to 4.5.6.a. The vulnerability stems from an issue with unknown code in the component Form Handler, whi...
PT-2022-28080 · Unknown · Dolibarr Project Timesheet
Name of the Vulnerable Software and Affected Versions: dolibarr project timesheet versions up to 4.5.5 Description: A vulnerability was found in the Form Handler component, leading to cross-site request forgery. The attack can be initiated remotely. Recommendations: For versions up to 4.5.5,...
Dolibarr SQL Injection Vulnerability
Dolibarr is a software application. It can help you manage the activities of your organization. An SQL injection vulnerability exists in dolibarrerp/crm 16.0.1, version 16.0.2, which stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit the...
GHSA-GJG7-QFVP-9HM4 SQL injection in Dolibarr
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In...
SQL injection in Dolibarr
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In...
CVE-2022-4093 SQL Injection in dolibarr/dolibarr
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In...
Dolibarr SQL注入漏洞
Dolibarr is a software application. It can help you manage the activities of your organization. An SQL injection vulnerability exists in dolibarrerp/crm 16.0.1, version 16.0.2, which stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit the...
CVE-2022-4093 SQL Injection in dolibarr/dolibarr
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In...
Privilege Escalation
dolibarr/dolibarr is vulnerable to privilege escalation. The vulnerability exists due to improper authorization checks in the library, allowing an attacker to escalate privileges via crafted API call, leading to account takeover...
GHSA-GH7M-J673-WM97 Dolibarr vulnerable to privilege escalation
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API...
Dolibarr vulnerable to privilege escalation
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API...
CVE-2022-43138
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API...
