CVE-2018-13448

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

CVE-2018-13447

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

CVE-2018-13450

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

CVE-2018-13449

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...

CVE-2018-13447

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

CVE-2018-13449

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...

CVE-2018-13450

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

CVE-2018-13447

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

CVE-2018-13448

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

CVE-2018-13448

Dolibarr ERP/CRM 7.0.3 is affected by an SQL injection in product/card.php via the country_id parameter, enabling remote arbitrary SQL execution. The issue is confirmed across multiple sources (NVD entry CVE-2018-13448, OSV/Ubuntu/Nessus references) and is categorized with a high/severe impact (C...

CVE-2018-13448

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

CVE-2018-13450

CVE-2018-13450 affects Dolibarr ERP/CRM, specifically version 7.0.3. An SQL injection vulnerability exists in the file product/card.php via the status_batch parameter, allowing remote attackers to execute arbitrary SQL commands. The issue is evidenced by multiple connected sources (NVD entry reit...

CVE-2018-13447

CVE-2018-13447 : Dolibarr ERP/CRM 7.0.3 contains a SQL injection in product/card.php via the statut parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS v3.0 base score 9.8 (CRITICAL); vector: NETWORK, LOW attack complexity, no authentication, with HIGH impact on confident...

CVE-2018-13449

CVE-2018-13449 is a Dolibarr ERP/CRM 7.0.3 vulnerability in the file product/card.php: a SQL injection via the statut_buy parameter allows remote attackers to execute arbitrary SQL commands. The entry is supported by multiple sources (NVD and OSS entries) indicating a high-severity, network-expos...

CVE-2018-13448: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

PT-2018-11831

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 7.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the country id parameter in the product/card.php file. Recommendations For version 7.0.3, consider restricting...

PT-2018-11834

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 7.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the status batch parameter in the product/card.php file. Recommendations For version 7.0.3, consider restricti...

PT-2018-11832

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 7.0.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the statut buy parameter in the product/card.php file. Recommendations For Dolibarr ERP/CRM version 7.0.3, avoid usi...

CVE-2018-13450: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

CVE-2018-13449: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...