Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2022/05/17 1:05 a.m.•31 views

Dolibarr ERP and CRM contain XSS Vulnerability

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

5.4CVSS5.7AI score0.00722EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2017/09/11 9:29 a.m.•34 views

CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

5.4CVSS6.5AI score0.00722EPSS
SaveExploits0References1
Mend
Mend
•added 2017/09/11 9:00 a.m.•13 views

CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

5.4CVSS0.00722EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/09/11 12:00 a.m.•5 views

PT-2017-13317

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 6.0.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to the "/htdocs/admin/menus/edit.php" API endpoint. Recommendations Fo...

5.4CVSS0.00722EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/11 12:00 a.m.•10 views

CVE-2017-14241: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

5.4CVSS5.9AI score0.00722EPSS
SaveExploits0References2
Rows per page
Query Builder