Lucene search
+L

2752 matches found

Veracode
Veracode
added 2018/09/06 2:45 a.m.20 views

SQL Injection

Dolibarr ERP/CRM is vulnerable to SQL injection attacks. An attacker is able to execute arbitrary SQL commands via the statutbuy in parameter in product/card.php...

9.8CVSS10AI score0.01918EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2018/08/25 12:00 a.m.7 views

SQL Injection and File Upload Vulnerabilities in Dimix ERP Office System of Shanghai Demisa Information Technology Co.

Shanghai Demisa Information Technology Co., Ltd. is a company that develops and sells intelligent office management software. A SQL injection and file upload vulnerability exists in the Dimix ERP office system of Shanghai Demisa Information Technology Co. An attacker can exploit the vulnerabiliti...

7.9AI score
SaveExploits0
CISA
CISA
added 2018/07/25 12:00 a.m.17 views

Malicious Cyber Activity Targeting ERP Applications

Digital Shadows Ltd. and Onapsis Inc. have released a report describing an increase in the exploitation of vulnerabilities in Enterprise Resource Planning ERP applications. ERP applications help organizations manage critical business processes—such as product lifecycle management, customer...

6.4AI score
SaveExploits0References2
CNVD
CNVD
added 2018/07/09 12:00 a.m.8 views

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-13459)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the product/card.php...

9.8CVSS9.8AI score0.01918EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/09 12:00 a.m.11 views

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-13454)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the product/card.php...

9.8CVSS9.8AI score0.01918EPSS
SaveExploits0References1
Prion
Prion
added 2018/07/08 4:29 p.m.20 views

Sql injection

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

7.5CVSS9.9AI score0.01937EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2018/07/08 4:29 p.m.19 views

CVE-2018-13448

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS7.5AI score0.01918EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/07/08 4:29 p.m.19 views

CVE-2018-13450

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS7.5AI score0.01918EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/07/08 4:29 p.m.15 views

CVE-2018-13449

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...

9.8CVSS7.5AI score0.01918EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/08 4:29 p.m.15 views

CVE-2018-13448

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS8.7AI score
SaveExploits0References1
OSV
OSV
added 2018/07/08 4:29 p.m.16 views

CVE-2018-13450

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS8.7AI score
SaveExploits0References1
NVD
NVD
added 2018/07/08 4:29 p.m.22 views

CVE-2018-13447

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

9.8CVSS10AI score0.01937EPSS
SaveExploits0References1
NVD
NVD
added 2018/07/08 4:29 p.m.22 views

CVE-2018-13450

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS10AI score0.01918EPSS
SaveExploits0References1
NVD
NVD
added 2018/07/08 4:29 p.m.19 views

CVE-2018-13448

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS10AI score0.01918EPSS
SaveExploits0References1
Prion
Prion
added 2018/07/08 4:29 p.m.20 views

Sql injection

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

7.5CVSS9.9AI score0.01918EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2018/07/08 4:29 p.m.16 views

Sql injection

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...

7.5CVSS9.9AI score0.01918EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/07/08 4:29 p.m.22 views

CVE-2018-13449

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...

9.8CVSS10AI score0.01918EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/07/08 4:29 p.m.22 views

CVE-2018-13447

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

9.8CVSS7.5AI score0.01937EPSS
SaveExploits0References1
Prion
Prion
added 2018/07/08 4:29 p.m.14 views

Sql injection

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

7.5CVSS9.9AI score0.01918EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/07/08 4:29 p.m.20 views

CVE-2018-13449

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...

9.8CVSS8.6AI score
SaveExploits0References1
Rows per page
Query Builder