Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2739 matches found

Prion
Prion•added 2019/10/15 12:15 p.m.•17 views

Design/Logic Flaw

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

4.3CVSS6.4AI score0.01114EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2019/10/15 11:59 a.m.•22 views

CVE-2019-17223

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

6.3AI score0.01114EPSS
SaveExploits0References2
CVE
CVE•added 2019/10/15 11:59 a.m.•65 views

CVE-2019-17223

Dolibarr ERP/CRM 10.0.2 is affected by CVE-2019-17223, an HTML Injection in the Note field (via user/note.php). The vulnerability originates from unfiltered input, enabling injection in notes. Public references confirm Dolibarr 10.0.2 as affected; CVSS data from NVD shows CVSSv2 base 4.3 (MEDIUM)...

6.1CVSS6.3AI score0.01114EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC•added 2019/10/01 12:00 a.m.•11 views

The vulnerability of the GALAXY ERP resource management system allows a hacker to replace software updates.

The vulnerability of the Plain FTP protocol used by the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability can allow a malicious actor to gain access to software updates and...

3.4CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC•added 2019/10/01 12:00 a.m.•29 views

The vulnerability of the Enterprise Resource Management System “Galaktika ERP” allows a perpetrator to execute arbitrary codes.

The vulnerability of the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has access to the update server, to execute...

8.3CVSS6AI score
SaveExploits0Affected Software1
CNVD
CNVD•added 2019/09/29 12:00 a.m.•12 views

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-33854)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

5.4CVSS6.4AI score0.00775EPSS
SaveExploits1References1
exploitpack
exploitpack•added 2019/09/19 12:00 a.m.•26 views

DIGIT CENTRIS 4 ERP - datum1 SQL Injection

DIGIT CENTRIS 4 ERP - datum1 SQL Injection Exploit Title: DIGIT CENTRIS 4 ERP - 'datum1' SQL Injection Date: 2019-09-19 Exploit Author: n1x MS-WEB Vendor Homepage: http://www.digit-rs.com/ Product Homepage: http://digit-rs.com/centris.html Version: Every version CVE : N/A Vulnerable parameters:...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm•added 2019/09/19 12:00 a.m.•150 views

DIGIT CENTRIS 4 ERP SQL Injection

Exploit Title: DIGIT CENTRIS 4 ERP - 'datum1' SQL Injection Date: 2019-09-19 Exploit Author: n1x MS-WEB Vendor Homepage: http://www.digit-rs.com/ Product Homepage: http://digit-rs.com/centris.html Version: Every version CVE : N/A Vulnerable parameters: datum1, datum2, KID, PID POST REQUEST POST...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB•added 2019/09/19 12:00 a.m.•260 views

DIGIT CENTRIS 4 ERP - 'datum1' SQL Injection

Exploit Title: DIGIT CENTRIS 4 ERP - 'datum1' SQL Injection Date: 2019-09-19 Exploit Author: n1x MS-WEB Vendor Homepage: http://www.digit-rs.com/ Product Homepage: http://digit-rs.com/centris.html Version: Every version CVE : N/A Vulnerable parameters: datum1, datum2, KID, PID POST REQUEST POST...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB•added 2019/09/13 12:00 a.m.•381 views

Dolibarr ERP-CRM 10.0.1 - 'User-Agent' Cross-Site Scripting

Exploit Title: Dolibarr ERP/CRM 10.0.1 - User-Agent Http Header Cross Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux CVE:...

6.1CVSS6.1AI score0.0299EPSS
SaveExploits5
exploitpack
exploitpack•added 2019/09/13 12:00 a.m.•81 views

Dolibarr ERP-CRM 10.0.1 - User-Agent Cross-Site Scripting

Dolibarr ERP-CRM 10.0.1 - User-Agent Cross-Site Scripting Exploit Title: Dolibarr ERP/CRM 10.0.1 - User-Agent Http Header Cross Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1...

4.3CVSS6AI score0.0299EPSS
SaveExploits5
Packet Storm
Packet Storm•added 2019/09/13 12:00 a.m.•222 views

Dolibarr ERP-CRM 10.0.1 Cross Site Scripting

Exploit Title: Dolibarr ERP/CRM 10.0.1 - User-Agent Http Header Cross Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux CVE:...

6.2AI score0.0299EPSS
SaveExploits5
exploitpack
exploitpack•added 2019/09/09 12:00 a.m.•74 views

Dolibarr ERP-CRM 10.0.1 - SQL Injection

Dolibarr ERP-CRM 10.0.1 - SQL Injection Exploit Title: Dolibarr ERP/CRM - Multiple Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux...

SaveExploits0
Packet Storm
Packet Storm•added 2019/09/09 12:00 a.m.•169 views

Dolibarr ERP-CRM 10.0.1 SQL Injection

Exploit Title: Dolibarr ERP/CRM - Multiple Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux Software Description : Dolibarr ERP & CR...

SaveExploits0
Packet Storm
Packet Storm•added 2019/09/09 12:00 a.m.•174 views

Dolibarr ERP-CRM 10.0.1 SQL Injection

Exploit Title: Dolibarr ERP/CRM - elemid Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux Software Description : Dolibarr ERP & CRM ...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB•added 2019/09/09 12:00 a.m.•463 views

Dolibarr ERP-CRM 10.0.1 - SQL Injection

Exploit Title: Dolibarr ERP/CRM - Multiple Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux Software Description : Dolibarr ERP & CR...

5.3AI score
SaveExploits0
zdt
zdt•added 2019/09/09 12:00 a.m.•26 views

Dolibarr ERP-CRM 10.0.1 - elemid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Dolibarr ERP/CRM - elemid Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xamp...

0.2AI score
SaveExploits0
exploitpack
exploitpack•added 2019/09/09 12:00 a.m.•23 views

Dolibarr ERP-CRM 10.0.1 - elemid SQL Injection

Dolibarr ERP-CRM 10.0.1 - elemid SQL Injection Exploit Title: Dolibarr ERP/CRM - elemid Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB•added 2019/09/09 12:00 a.m.•263 views

Dolibarr ERP-CRM 10.0.1 - 'elemid' SQL Injection

Exploit Title: Dolibarr ERP/CRM - elemid Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux Software Description : Dolibarr ERP & CRM ...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm•added 2019/09/09 12:00 a.m.•162 views

Dolibarr ERP-CRM 10.0.1 SQL Injection

Exploit Title: Dolibarr ERP/CRM - elemid Sql Injection Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.dolibarr.org/ Software Link: https://www.dolibarr.org/downloads Version: 10.0.1 Category: Webapps Tested on: Xampp for Linux Software Description : Dolibarr ERP & CRM ...

7.4AI score
SaveExploits0
Rows per page
Query Builder