Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 5:37 p.m.•46 views

Dolibarr authenticated Remote Code Execution

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

9CVSS7.4AI score0.06633EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/24 5:37 p.m.•34 views

GHSA-7X8G-H246-GVX3 Dolibarr authenticated Remote Code Execution

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

7.2CVSS6.9AI score0.06633EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2020/12/23 3:15 p.m.•21 views

CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

7.2CVSS7.1AI score
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2020/12/23 3:15 p.m.•55 views

UBUNTU-CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

7.2CVSS7.1AI score0.06633EPSS
SaveExploits1References6
Mend
Mend
•added 2020/12/23 2:39 p.m.•5 views

CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

9CVSS0.06633EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/23 12:00 a.m.•4 views

CVE-2020-35136: Improper Neutralization of Argument Delimiters in a Command

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

9CVSS5.8AI score0.06633EPSS
SaveExploits1References2
Rows per page
Query Builder