3368 matches found
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
Code injection
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840
Dolibarr ERP/CRM prior to 5.0.3 is vulnerable to arbitrary code execution via an insecure file upload mechanism. The issue affects the Dolibarr web application where low-privilege users can upload dangerous file types, allowing code execution within the vulnerable application’s context. The provi...
CVE-2017-9840
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
CVE-2017-9840: Unrestricted Upload of File with Dangerous Type
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application...
PT-2017-19210
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions 5.0.3 and prior Description The issue allows low-privilege users to upload files of dangerous types, potentially resulting in arbitrary code execution within the context of the vulnerable application. Recommendations...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
Sql injection
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
UBUNTU-CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
CVE-2017-9435
CVE-2017-9435 affects Dolibarr ERP/CRM prior to 5.0.3. It is a SQL injection vulnerability in user/index.php (parameters search_supervisor and search_statut). The issue allows attackers to manipulate SQL queries (as described across connected documents). No explicit exploit details or patch info ...
PT-2017-18918
Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions prior to 5.0.3 Description The issue concerns a SQL injection. It affects the user/index.php file, specifically the search supervisor and search statut parameters. Recommendations For versions prior to 5.0.3, update t...
CVE-2017-9435: Improper Neutralization of Special Elements used in an SQL Command
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php searchsupervisor and searchstatut parameters...
Sql injection
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...