Remote Code Execution

2022-10-1312:27:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

dolibarr

remote code execution

vulnerability

administrator

installation page

malicious code

target system

validations function

EPSS

0.003

Percentile

68.8%

JSON

Dolibarr is vulnerable to remote code execution. By default, it is possible to add any administrator to the installation page, which enables the malicious user to inject and execute malicious code on the target system due to improper validations in the verifCond function in functions.lib.php.