2312 matches found
GHSA-8FVR-7945-MG7W Cross site scripting in dolibarr
A Cross-site Scripting XSS vulnerability exists in the admin/accountant.php file. The fields town, name, and Accountant code can be used to escape double quote protection...
Cross site scripting in dolibarr
A Cross-site Scripting XSS vulnerability exists in the admin/accountant.php file. The fields town, name, and Accountant code can be used to escape double quote protection...
CVE-2022-2060
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-2060
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...
UBUNTU-CVE-2022-2060
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-2060
CVE-2022-2060 describes a cross-site scripting (XSS) vulnerability stored in the Dolibarr codebase (dolibarr/dolibarr) prior to version 16.0. The root cause, per CNVD, is a lack of filtering/escaping of data parameters in the application, enabling JS execution in a victim’s browser. The published...
CVE-2022-2060 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-2060 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...
Cross-site Scripting (XSS)
dolibarr/dolibarr is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script as it does not handle SQL error page properly...
Dolibarr 跨站脚本漏洞
Dolibarr is an application. A modern software package that helps manage your organization's activities.A cross-site scripting vulnerability exists in versions prior to Dolibarr 16.0, which stems from the application's lack of filtering and escaping of data parameters. An attacker could exploit th...
PT-2022-14807 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: dolibarr/dolibarr versions prior to 16.0 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability. It affects the admin/accountant.php file, where the fields town, name, and Accountant code can be used to escape...
A stored XSS in dolibarr/htdocs/admin/accountant.php
Description I found a stored XSS in the admin/accountant.php, the field town, name, Accountant code can escape the double quote. In the path 'dolibarr/htdocs/main.inc.php' has a WAF, we can not inject any the javascript onxxx event. However, in the path...
GHSA-F2G5-426F-353Q Cross-site Scripting in Dolibarr
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
Cross-site Scripting in Dolibarr
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
Dolibarr Cross-Site Scripting Vulnerability (CNVD-2022-71638)
Dolibarr is an ERP/CRM system with plug-and-play modules and a well-established ecosystem with customizations and service providers worldwide. version 12.0.5 of Dolibarr suffers from a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting XSS attacks...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...