3344 matches found
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
PT-2017-19210
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions 5.0.3 and prior Description The issue allows low-privilege users to upload files of dangerous types, potentially resulting in arbitrary code execution within the context of the vulnerable application. Recommendations...
CVE-2017-9840: Unrestricted Upload of File with Dangerous Type
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
Sql injection
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
UBUNTU-CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
CVE-2017-9435 affects Dolibarr ERP/CRM prior to 5.0.3. It is a SQL injection vulnerability in user/index.php (parameters search_supervisor and search_statut). The issue allows attackers to manipulate SQL queries (as described across connected documents). No explicit exploit details or patch info ...
PT-2017-18918
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions prior to 5.0.3 Description The issue concerns a SQL injection. It affects the user/index.php file, specifically the search supervisor and search statut parameters. Recommendations For versions prior to 5.0.3, update t...
CVE-2017-9435: Improper Neutralization of Special Elements used in an SQL Command
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
Sql injection
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...
Cross site scripting
Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter...
Design/Logic Flaw
Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier...
Design/Logic Flaw
Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation...
CVE-2017-7887
Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter...