CVE-2020-14201

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code...

CVE-2020-14201: Undefined Security Weakness

Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code...

PT-2020-13927

Name of the Vulnerable Software and Affected Versions Dolibarr CRM versions prior to 11.0.5 Description The issue allows remote authenticated attackers to perform privilege escalation, enabling them to upload arbitrary files. This is achieved by modifying the "disabled" parameter to "enabled" in...