ATM Consulting dolibarr_module_quicksupplierprice SQL注入漏洞

dolibarrmodulequicksupplierprice is an open source application from ATM Consulting. Allows to quickly add supplier prices directly from the supplier order . ATM Consulting dolibarrmodulequicksupplierprice 1.1.6 and earlier versions have a SQL injection vulnerability that stems from a problem with...

PT-2023-15920 · Dolibarr · Dolibarr Module Quicksupplierprice

Name of the Vulnerable Software and Affected Versions: dolibarr module quicksupplierprice versions up to 1.1.6 Description: A critical issue has been found in the affected software, allowing for sql injection through the manipulation of the upatePrice function in the script/interface.php file. Th...