Lucene search
Veracode Vulnerability DatabaseVERACODE:5328HistoryOct 25, 2017 - 5:15 a.m.
SQL Injection
2017-10-2505:15:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
39.5%
Dolibarr is vulnerable to multiple SQL injection attacks. The search_country, search_type_thirdparty, viewstatut, viewstatut, search_sale, and search_user user-supplied values are not escaped before being placed into an SQL statement.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 5.0.4 |
Related
cve
cve
CVE-2017-9839
2018-04-11 03:29:00
ubuntucve
ubuntucve
CVE-2017-9839
2018-04-11 00:00:00
prion
prion
Sql injection
2018-04-11 03:29:00
cvelist
cvelist
CVE-2017-9839
2018-04-11 03:00:00
nvd
nvd
CVE-2017-9839
2018-04-11 03:29:00
osv
osv
Dolibarr SQL injection via type parameter in product/stats/card.php
2022-05-14 03:23:30
CVE-2017-9839
2018-04-11 03:29:00
github
github
Dolibarr SQL injection via type parameter in product/stats/card.php
2022-05-14 03:23:30
openvas
openvas
Dolibarr <= 5.0.3 Multiple Vulnerabilities
2018-04-11 00:00:00