Lucene search
Veracode Vulnerability DatabaseVERACODE:7438HistorySep 06, 2018 - 2:45 a.m.
SQL Injection
2018-09-0602:45:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
47.1%
Dolibarr ERP/CRM is vulnerable to SQL injection attacks. An attacker is able to execute arbitrary SQL commands via the statut_buy in parameter in product/card.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 7.0.5 | |
| dolibarr/dolibarr | le | 7.0.5 |
Related
veracode
veracode
SQL Injection
2018-07-09 04:19:50
cve
cve
CVE-2018-13449
2022-10-03 16:22:18
osv
osv
CVE-2018-13449
2018-07-08 16:29:00
Dolibarr SQL injection vulnerability in product/card.php
2022-05-14 03:00:59
ubuntucve
ubuntucve
CVE-2018-13449
2018-07-08 00:00:00
github
github
Dolibarr SQL injection vulnerability in product/card.php
2022-05-14 03:00:59
cvelist
cvelist
CVE-2018-13449
2022-10-03 16:22:18
nvd
nvd
CVE-2018-13449
2018-07-08 16:29:00
prion
prion
Sql injection
2018-07-08 16:29:00
openvas
openvas
Dolibarr <= 7.0.3 Multiple SQLi Vulnerabilities
2018-07-10 00:00:00