Skip to content
OpenAdvisories

Archive

10 May 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1

    Dolibarr ERP and CRM contain XSS Vulnerability

    Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.

  • Medium 6.8

    Dolibarr allows password changes without supplying the current password

    Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation.