Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6992
HistoryJul 09, 2018 - 4:19 a.m.

SQL Injection

2018-07-0904:19:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

EPSS

0.001

Percentile

46.8%

dolibarr/dolibarr is vulnerable to SQL Injection attacks. The application does not properly sanitize the statut_buy parameter in product/card.php, allowing a malicious user to inject and execute arbitrary SQL commands.

EPSS

0.001

Percentile

46.8%