Lucene search
K

8 matches found

OSV
OSV
added 2022/05/24 4:58 p.m.8 views

GHSA-9P7Q-V9GP-FRQ4 Dolibarr Cross-site Scripting vulnerability

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Sender email for automatic emails default value in php.ini: Undefined" field...

5.4CVSS5.3AI score0.00313EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/05/24 4:58 p.m.9 views

Dolibarr Cross-site Scripting vulnerability

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Sender email for automatic emails default value in php.ini: Undefined" field...

5.4CVSS6AI score0.00313EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2019/10/16 6:15 p.m.5 views

CVE-2019-17577

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Email used for error returns emails fields 'Errors-To' in emails sent" field...

5.4CVSS5.2AI score0.00313EPSS
Exploits1References1
NVD
NVD
added 2019/10/16 6:15 p.m.7 views

CVE-2019-17578

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Sender email for automatic emails default value in php.ini: Undefined" field...

5.4CVSS5.2AI score0.00313EPSS
Exploits1References1
Prion
Prion
added 2019/10/16 6:15 p.m.9 views

Design/Logic Flaw

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the /admin/mails.php?action=edit URI via the "Send all emails to instead of real recipients, for test purposes" field...

3.5CVSS5.1AI score0.00313EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/10/16 5:40 p.m.39 views

CVE-2019-17577

CVE-2019-17577 affects Dolibarr 10.0.2 with a stored XSS in the outgoing email setup: in /admin/mails.php?action=edit, via the Email used for error returns emails field (Errors-To). Nessus entries similarly describe Dolibarr 10.0.2 as vulnerable with no vendor patch reported in those records. No ...

5.4CVSS5.2AI score0.00313EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/16 5:40 p.m.10 views

CVE-2019-17577

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Email used for error returns emails fields 'Errors-To' in emails sent" field...

5.4AI score0.00313EPSS
Exploits1References1
exploitpack
exploitpack
added 2018/05/26 12:0 a.m.16 views

easyLetters 1.0 - id SQL Injection

easyLetters 1.0 - id SQL Injection Exploit Title: easyLetters 1.0 - 'id' SQL Injection Dork: N/A Date: 25.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/easyletters/5281396 Version: 1.0 Category: Webapps Tested on: Kali linux...

0.1AI score
Exploits0
Rows per page
Query Builder