Lucene search
Veracode Vulnerability DatabaseVERACODE:13712HistoryApr 30, 2019 - 8:19 a.m.
Command Injection
2019-04-3008:19:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
44.2%
Dolibarr/dolibarr is vulnerable to command injection. A lack of validation in the $command parameter allows a remote attacker to submit characters that can be used to bypass escapeshellarg and inject arbitrary commands into the affected parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 9.0.2 |
Related
osv
osv
Dolibarr ERP and CRM malicious executable loading
2022-05-24 16:51:38
CVE-2019-11200
2019-07-29 16:15:11
prion
prion
Input validation
2019-07-29 16:15:00
cvelist
cvelist
CVE-2019-11200
2019-07-29 15:39:02
nvd
nvd
CVE-2019-11200
2019-07-29 16:15:11
github
github
Dolibarr ERP and CRM malicious executable loading
2022-05-24 16:51:38
cve
cve
CVE-2019-11200
2019-07-29 16:15:11
ubuntucve
ubuntucve
CVE-2019-11200
2019-07-29 00:00:00
openvas
openvas
Dolibarr < 9.0.3 Multiple Vulnerabilities
2019-07-31 00:00:00