Lucene search
+L

11 matches found

KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•7 views

Dolibarr <7.0.2 - Cross-Site Scripting Detection

Dolibarr before 7.0.2 is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. !/usr/bin/env python3 -- coding: utf-8 -- """Dolibarr before 7.""" from kittysploit import from...

6.1CVSS6.9AI score0.86774EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2018-10095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to...

6.1CVSS6.9AI score0.86774EPSS
SaveExploits2References2
Github Security Blog
Github Security Blog
•added 2022/05/14 3:20 a.m.•38 views

Dolibarr Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

6.1CVSS6AI score0.86774EPSS
SaveExploits2References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/14 3:20 a.m.•67 views

GHSA-P2FM-8RHJ-58FR Dolibarr Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

6.1CVSS6AI score0.86774EPSS
SaveExploits2References6
CNVD
CNVD
•added 2018/05/23 12:00 a.m.•20 views

Dolibarr cross-site scripting vulnerability (CNVD-2018-15285)

Dolibarr is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr versions prior...

6.1CVSS6.1AI score0.86774EPSS
SaveExploits2References1
osv_ubuntu
osv_ubuntu
•added 2018/05/22 8:29 p.m.•17 views

UBUNTU-CVE-2018-10095

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

6.1CVSS6.9AI score0.86774EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2018/05/22 8:29 p.m.•40 views

CVE-2018-10095

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

6.1CVSS6.8AI score0.86774EPSS
SaveExploits2References1
Mend
Mend
•added 2018/05/22 8:00 p.m.•6 views

CVE-2018-10095

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

6.1CVSS0.86774EPSS
SaveExploits2References7
Cvelist
Cvelist
•added 2018/05/22 8:00 p.m.•45 views

CVE-2018-10095

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

6.2AI score0.86774EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/22 12:00 a.m.•4 views

CVE-2018-10095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

6.1CVSS6.9AI score0.86774EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2018/05/22 12:00 a.m.•3 views

PT-2018-9676

Name of the Vulnerable Software and Affected Versions: Dolibarr versions prior to 7.0.2 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to "adherents/cartes/carte.php". Recommendations: For versions prior ...

6.1CVSS0.86774EPSS
SaveExploits2References11
Rows per page
Query Builder