CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-14239

Dolibarr ERP/CRM 6.0.0 is affected by multiple XSS vulnerabilities. The issues are triggered through the following parameters in htdocs/admin/company.php: CompanyName, CompanyAddress, CompanyZip, CompanyTown, Fax, EMail, Web, ManagingDirectors, Note, Capital, ProfId1–ProfId6. The vulnerabilities ...

CVE-2017-14240

CVE-2017-14240 affects Dolibarr ERP/CRM 6.0.0 and is a vulnerability in the file parameter of the document.php script that leads to information disclosure. The issue, described in multiple sources, enables an attacker to obtain sensitive data via the documented file parameter without authenticati...

CVE-2017-14240

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

CVE-2017-14241: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

PT-2017-13313

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the menuId parameter in the "admin/menus/edit.php" endpoint. Recommendations For Dolibarr ERP/CRM version 6.0.0, avo...

PT-2017-13314

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via multiple parameters to the htdocs/admin/company.php endpoint. The vulnerable parameters include CompanyName,...

CVE-2017-14238: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

PT-2017-13316

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A sensitive information disclosure issue exists in document.php via the file parameter. Recommendations For version 6.0.0, update to a newer version that contains a fix for this issue...

CVE-2017-14240: Exposure of Sensitive Information to an Unauthorized Actor

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter...

PT-2017-13317

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to the "/htdocs/admin/menus/edit.php" API endpoint. Recommendations Fo...

CVE-2017-14239: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 CompanyName, 2 CompanyAddress, 3 CompanyZip, 4 CompanyTown, 5 Fax, 6 EMail, 7 Web, 8 ManagingDirectors, 9 Note, 10 Capital, 11 ProfId1, 12...

Odoo OAuth Session Hijacking Vulnerability

Odoo formerly known as OpenERP is a product of the Belgian company Odoo, an Enterprise Resource Planning ERP and Customer Relationship Management CRM system; Odoo Community Edition is its Community Edition; Odoo Enterprise Edition is its Enterprise Edition; the OAuth module is one of the Open Web...

Oracle JD Edwards EnterpriseOne Tools Remote Vulnerability

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle, providing financial management, project management, and asset lifecycle management applications.JD Edwards EnterpriseOne Tools is one of the tool components. A security vulnerabili...

Code injection

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

UBUNTU-CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...

CVE-2017-9840

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...