Archive
10 May 2017
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium 6.1
Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.
-
Medium 6.8
Dolibarr allows password changes without supplying the current password
Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation.