Lucene search
Veracode Vulnerability DatabaseVERACODE:5329HistoryOct 25, 2017 - 5:29 a.m.
Cross-site Scripting (XSS)
2017-10-2505:29:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
24.0%
Dolibarr is vulnerable to cross-site scripting (XSS) attacks. The QUERY_STRING parameter is not escaped for pages being called with ajax. This allows attackers to inject and execute arbitrary webscript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 5.0.4 |
Related
nvd
nvd
CVE-2017-9838
2018-04-11 03:29:00
ubuntucve
ubuntucve
CVE-2017-9838
2018-04-11 00:00:00
prion
prion
Cross site scripting
2018-04-11 03:29:00
osv
osv
CVE-2017-9838
2018-04-11 03:29:00
Dolibarr Cross-Site Scripting (XSS) vulnerability
2022-05-14 03:23:30
cvelist
cvelist
CVE-2017-9838
2018-04-11 03:00:00
cve
cve
CVE-2017-9838
2018-04-11 03:29:00
github
github
Dolibarr Cross-Site Scripting (XSS) vulnerability
2022-05-14 03:23:30
openvas
openvas
Dolibarr <= 5.0.3 Multiple Vulnerabilities
2018-04-11 00:00:00