CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

OSV•added 2022/05/13 1:11 a.m.•48 views

GHSA-FFF9-M6F6-Q3MH Dolibarr SQL Injection vulnerability

SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categorieslist.php, /accountancy/admin/journalslist.php, /admin/dict.php,...

9.8CVSS10AI score0.03899EPSS

SaveExploits0References5

NVD•added 2019/09/27 8:15 p.m.•32 views

CVE-2019-16688

Dolibarr 9.0.5 has stored XSS in an Email Template section to mailstemplates.php. A user with no privileges can inject script to attack the admin. This stored XSS can affect all types of user privilege from Admin to users with no permissions...

5.4CVSS5.2AI score0.00775EPSS

SaveExploits1References1

Mend•added 2019/09/27 7:14 p.m.•2 views

CVE-2019-16688

5.4CVSS0.00775EPSS

SaveExploits1References3

CVE•added 2019/09/27 7:14 p.m.•242 views

CVE-2019-16688

Dolibarr 9.0.5 is affected by a stored XSS in the Email Template section (mails_templates.php). A user with no privileges can inject script to attack the admin, with impact across privilege levels as described. No patch/fix details are provided in the connected documents.

5.4CVSS5.1AI score0.00775EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2019/09/27 12:00 a.m.•2 views

CVE-2019-16688: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.9AI score0.00775EPSS

SaveExploits1References2

OSV•added 2018/05/22 8:29 p.m.•32 views

CVE-2018-9019

9.8CVSS9.2AI score

SaveExploits0References3

Prion•added 2018/05/22 8:29 p.m.•25 views

Sql injection

7.5CVSS10AI score0.03899EPSS

SaveExploits0References3Affected Software2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by