Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6990
HistoryJul 09, 2018 - 4:07 a.m.

SQL Injection

2018-07-0904:07:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.001 Low

EPSS

Percentile

47.1%

dolibarr/dolibarr is vulnerable to SQL Injection attacks. The application does not properly sanitize the country_id parameter in product/card.php, allowing a malicious user to inject and execute arbitrary SQL commands.

CPENameOperatorVersion
dolibarr/dolibarrle7.0.3

0.001 Low

EPSS

Percentile

47.1%