Lucene search
K

15 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-16809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and...

9.8CVSS8.5AI score0.00707EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2022/05/14 3:15 a.m.23 views

Dolibarr SQL injection vulnerability

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes...

9.8CVSS8.9AI score0.73712EPSS
Exploits10References7Affected Software1
OSV
OSV
added 2022/05/14 3:15 a.m.16 views

GHSA-57WJ-22W9-WM9R Dolibarr SQL injection vulnerability

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes...

9.8CVSS9.7AI score0.73712EPSS
Exploits10References7
OSV
OSV
added 2022/05/14 1:27 a.m.14 views

GHSA-H34Q-878W-W96R Dolibarr SQL injection via the integer parameters qty and value_unit

An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and valueunit...

9.8CVSS9.8AI score0.00707EPSS
Exploits1References3
NVD
NVD
added 2019/03/07 11:29 p.m.16 views

CVE-2018-16809

An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and valueunit...

9.8CVSS9.9AI score0.00707EPSS
Exploits1References1
Prion
Prion
added 2019/03/07 11:29 p.m.19 views

Sql injection

An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and valueunit...

7.5CVSS9.8AI score0.00707EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/03/07 11:29 p.m.22 views

CVE-2018-16809

An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and valueunit...

9.8CVSS7.3AI score0.00707EPSS
Exploits1References2
OSV
OSV
added 2018/05/22 8:29 p.m.20 views

CVE-2018-10094

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes...

9.8CVSS10AI score0.73712EPSS
Exploits10References5
NVD
NVD
added 2018/05/22 8:29 p.m.13 views

CVE-2018-10094

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes...

9.8CVSS9.8AI score0.73712EPSS
Exploits10References5
OSV
OSV
added 2018/05/22 8:29 p.m.0 views

UBUNTU-CVE-2018-10094

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes...

9.8CVSS7.7AI score0.73712EPSS
Exploits10References2
Prion
Prion
added 2018/05/22 8:29 p.m.13 views

Sql injection

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes...

7.5CVSS9.8AI score0.73712EPSS
Exploits10References5Affected Software1
UbuntuCve
UbuntuCve
added 2018/05/22 8:29 p.m.27 views

CVE-2018-10094

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes...

9.8CVSS7.5AI score0.73712EPSS
Exploits10References1
Friends Of PHP
Friends Of PHP
added 2018/03/06 3:40 p.m.8 views

Potential SQL injection vector

The SelectLimit function has a potential SQLi exploit through the use of the nrows and offset parameters which are not forced to integers. Fixes 400...

7.1AI score
Exploits0Affected Software1
0day.today
0day.today
added 2015/04/09 12:0 a.m.23 views

WordPress SP Project & Document Manager 2.5.3 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection Google Dork: inurl:wp-content/plugins/sp-client-document-manager Date: 2015-03-04 Exploit Author: catsecurity Vendor Homepage: http://smartypantsplugins.com...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2015/03/31 12:0 a.m.14 views

WordPress Plugin SP Project Document Manager 2.5.3 - Blind SQL Injection

WordPress Plugin SP Project Document Manager 2.5.3 - Blind SQL Injection Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection Google Dork: inurl:wp-content/plugins/sp-client-document-manager Date: 2015-03-04 Exploit Author: catsecurity Vendor Homepage:...

Exploits0
Rows per page
Query Builder