Lucene search
Veracode Vulnerability DatabaseVERACODE:13428HistoryMar 08, 2019 - 6:38 a.m.
SQL Injection
2019-03-0806:38:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.002
Percentile
59.4%
github.com/Dolibarr/dolibarr is vulnerable to SQL injection. A remote attacker is able to inject and execute arbitrary SQL queries in the application via the qty and value_unit parameters in the expense reports module due to a lack of input validation and sanitization.
References
Related
osv
osv
CVE-2018-16809
2019-03-07 23:29:00
Dolibarr SQL injection via the integer parameters qty and value_unit
2022-05-14 01:27:09
prion
prion
Sql injection
2019-03-07 23:29:00
cvelist
cvelist
CVE-2018-16809
2019-03-07 22:00:00
ubuntucve
ubuntucve
CVE-2018-16809
2019-03-07 00:00:00
cve
cve
CVE-2018-16809
2019-03-07 23:29:00
nvd
nvd
CVE-2018-16809
2019-03-07 23:29:00
github
github
Dolibarr SQL injection via the integer parameters qty and value_unit
2022-05-14 01:27:09
openvas
openvas
Dolibarr < 7.0.1 Multiple Vulnerabilities
2019-03-12 00:00:00